Behavioral task
behavioral1
Sample
defc32217b8f5d37354e349793153dcf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
defc32217b8f5d37354e349793153dcf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
defc32217b8f5d37354e349793153dcf_JaffaCakes118
-
Size
165KB
-
MD5
defc32217b8f5d37354e349793153dcf
-
SHA1
8376cc667681fadae721a2be8289d8a1d9442321
-
SHA256
19fc0c31b4f779f4d9f49d5499bba4d4f76d1e51fbd8514beaeae41e8ef80d03
-
SHA512
2f397c9c155dadcb505e300bfae4dd89b99b53b8d92152ed7f41f115813206c5ffc5c141d343f53b64f1a610549bcc0169409e1634748dedfc689344c82686d9
-
SSDEEP
3072:796pOSINB/LohGIQ+oepS9NzZ5F8cdZNQrHzdUavTqv4fC1CJxylpsMQ9NI0foQ:796sSmVdIQqSPzZwOkrHzbvm4fayapsF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource defc32217b8f5d37354e349793153dcf_JaffaCakes118
Files
-
defc32217b8f5d37354e349793153dcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 313KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE