Behavioral task
behavioral1
Sample
d8c0c78c21ab37355aa5bc088bba7add_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d8c0c78c21ab37355aa5bc088bba7add_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d8c0c78c21ab37355aa5bc088bba7add_JaffaCakes118
-
Size
1.7MB
-
MD5
d8c0c78c21ab37355aa5bc088bba7add
-
SHA1
de819615d2d26f1932f31c7a3ee44046315e6c52
-
SHA256
9b24e6517438b1b5ffd527cbffecb5ba3872d51e296b4b74dac90340ecdc70bf
-
SHA512
5fe16c13c451183571ed0670d8c5788932abab0f09dd3ef07bb7ae0ecdb2a6e309d30f4eb0dec5cb189289bffe60c0e27f9a10bb4f47554b6dc8dedd578a2d11
-
SSDEEP
49152:ytC1+1vYnrsvIx9RPPFrqaYcubfJNVB0SAdhNDQjTX:j+1vewMfFOf12FLtQjD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8c0c78c21ab37355aa5bc088bba7add_JaffaCakes118
Files
-
d8c0c78c21ab37355aa5bc088bba7add_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 632KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE