Behavioral task
behavioral1
Sample
dacc6c25034eed358a6cecb221508623_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dacc6c25034eed358a6cecb221508623_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dacc6c25034eed358a6cecb221508623_JaffaCakes118
-
Size
5.0MB
-
MD5
dacc6c25034eed358a6cecb221508623
-
SHA1
28988a9424c89005dab5bd51c5f1d527cd4e45a2
-
SHA256
ea2d64551d06ee73295d4593451bbda275d3fc48ecf49f04a5ad219fe84f14f1
-
SHA512
974331135a997256e41a1c179ccfc99fd2a243d3ddf4c05d149d4762e70763735de1ae6c2b269c667b44d50a606c37a59feba3b3ead85226153ef8bb77339bdd
-
SSDEEP
98304:/20M+y3B8Y0Szfy3XzNLAN54boUPwi04eF4UcXCoUHIc8Gyt9p+YbQsKvj:/J3cB8GfIzNLo54bdwi04eF4UcXViIVU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dacc6c25034eed358a6cecb221508623_JaffaCakes118
Files
-
dacc6c25034eed358a6cecb221508623_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 432KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE