Behavioral task
behavioral1
Sample
dee3c115e4e57191df02ccb1c09825b5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dee3c115e4e57191df02ccb1c09825b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dee3c115e4e57191df02ccb1c09825b5_JaffaCakes118
-
Size
1.1MB
-
MD5
dee3c115e4e57191df02ccb1c09825b5
-
SHA1
5fbc60b36e8c7add3383d2d019285c9921d8769a
-
SHA256
8029de82763c2d7fca7b1d780ebc33ae7c6e85701cc8ca36c930f536f5b01ab9
-
SHA512
cbc4b6ab71f3662d85f813a653593eae0c87ce5a2527d48465a30da6f8a7a30c7ac6535e6facd4c9dd1cacc9d4794563b2177f6ac29e11af08eb5b20b78957a1
-
SSDEEP
24576:COzCZbRKXf82SmMVjRBtygqybBuqXsD5NtFt2pa:LzCyfZMV1Buq25XV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dee3c115e4e57191df02ccb1c09825b5_JaffaCakes118
Files
-
dee3c115e4e57191df02ccb1c09825b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE