Behavioral task
behavioral1
Sample
fb0cada56f71ba77bde66630a9889f13_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fb0cada56f71ba77bde66630a9889f13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb0cada56f71ba77bde66630a9889f13_JaffaCakes118
-
Size
1.6MB
-
MD5
fb0cada56f71ba77bde66630a9889f13
-
SHA1
c0ed25b3a746a5c9b033dc66f7732dc2b5543128
-
SHA256
b4464f940e87e2516e1f96bc50a2576f91cf85dbead10d7960a7b39f932436d4
-
SHA512
7951096c36a1a6bb9d5eb9edf7c50b6f269d1d68fb66933c1056de5deca93cbab821ee20861e9ebb6db83bd5d01d40ebfef29b0c84d0e2d9d33d1150e5caaf54
-
SSDEEP
24576:efjZ39xxLK2qzlTqCXt+7kqGtBuEe1B/i9P8TvSklgwkjUjLAwhrPY56:eRx9klFlqGLuEuB/ip8TPgwCKLfe6
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0cada56f71ba77bde66630a9889f13_JaffaCakes118
Files
-
fb0cada56f71ba77bde66630a9889f13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE