Behavioral task
behavioral1
Sample
f98523ef45f80330afb4b46d542ff06c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f98523ef45f80330afb4b46d542ff06c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f98523ef45f80330afb4b46d542ff06c_JaffaCakes118
-
Size
6.6MB
-
MD5
f98523ef45f80330afb4b46d542ff06c
-
SHA1
f7a647069108e0c2f6e6262b4a87bad6e430d905
-
SHA256
07ac823da62ecf28ad6c29e5538daf454acb217df5986ca4a15f8e05b0c8e751
-
SHA512
3f20dbede48661855a5ed4d01a4684d0ab8199c6ff4caabf8184e8e82a158b17d9eb3c5a63a58c77b412f649c24f40063abf94bc55517a5fbac7dfd7d6d06b5f
-
SSDEEP
196608:0jkzyFTeNJQzb2lW6n7o+H/8VJwfMUYrwqDdsV:zyNeEeWr+HUVJwUhnds
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f98523ef45f80330afb4b46d542ff06c_JaffaCakes118
Files
-
f98523ef45f80330afb4b46d542ff06c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 404KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.0MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE