Behavioral task
behavioral1
Sample
f704bf6c0d159f51e0e8dea03b245ba9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f704bf6c0d159f51e0e8dea03b245ba9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f704bf6c0d159f51e0e8dea03b245ba9_JaffaCakes118
-
Size
4.0MB
-
MD5
f704bf6c0d159f51e0e8dea03b245ba9
-
SHA1
be02be54da6303a5847a8692cb3c6aae15c2547c
-
SHA256
c20569a06083b9c106536625556df317dd93caf8a3c417b3f1918c2152d30ead
-
SHA512
80d2fdfff99dec9d83ece056a9cc0070da5672d03cd3c9e72588d3c079da3447e2b81e82ae77360a9dde1b6f41a3f6b206580c6c1852dd8d63463bc11e56e3d1
-
SSDEEP
49152:jO5WJcnIbi+oGD4rFXiBcxv6MoHtdGa/W3X+ZA346jebh4ALZz3G+/XUX9So1L1:aFQ0rFy0v1oHtoa/6X1I6ebeK3GtZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f704bf6c0d159f51e0e8dea03b245ba9_JaffaCakes118
Files
-
f704bf6c0d159f51e0e8dea03b245ba9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 363KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE