Behavioral task
behavioral1
Sample
d9e9128774fb89bea380fdf1de38ad68_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d9e9128774fb89bea380fdf1de38ad68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9e9128774fb89bea380fdf1de38ad68_JaffaCakes118
-
Size
384KB
-
MD5
d9e9128774fb89bea380fdf1de38ad68
-
SHA1
79a3fb5d202eccef24c33e5fe5cb65053c098c11
-
SHA256
594b7726900b25f0175689c0b0a40570a172ece2ec1e31ae7846e5895a4a255a
-
SHA512
865f4329b586717f6b076ccb124ad115c89f6cbd7d959048bf068f6f6726f17ae85707a216f1036241174a6877a690352507bd3bf49ab2b339c1e6ae0bdaf1f0
-
SSDEEP
6144:pb38PL5sHaUEx6HNq5gOeJip1Ys1Vljz3IR3kldfQ8Iz7WZFKVH9miPsln:pSLHUK2BJIR1VljzG3eQ8Iz7sF+3Sn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9e9128774fb89bea380fdf1de38ad68_JaffaCakes118
Files
-
d9e9128774fb89bea380fdf1de38ad68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 64KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 728KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE