Behavioral task
behavioral1
Sample
dcef70d607f8f30461f4db2c44b38737_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcef70d607f8f30461f4db2c44b38737_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcef70d607f8f30461f4db2c44b38737_JaffaCakes118
-
Size
1.2MB
-
MD5
dcef70d607f8f30461f4db2c44b38737
-
SHA1
17686ef8277fc87b0465a28c4341234b9c5f1860
-
SHA256
86a33b155ed6a36adf4cd96128ade564d17c89c7b3c5c57409dfee14fe3af706
-
SHA512
6debb6cf5aae82636721fb575aa289d2a5f56806e842d1fcfcd1bfa7ee3a1b724e3cd859569eacf78d0f37339025e36d3df0ca491fd44cbd59bc450479004b34
-
SSDEEP
24576:AYiWh+qrCf/bnTsLRj6KXzOpETF3lAgY1tnl2qjKYPqEC5kdwY0HT5uDcb8oUodt:ABWTrC37ANTzOpz1Bo+4kiYu0DPod
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcef70d607f8f30461f4db2c44b38737_JaffaCakes118
Files
-
dcef70d607f8f30461f4db2c44b38737_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 117KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE