Behavioral task
behavioral1
Sample
fa44c8d0a777d4e425efca44f95e9b15_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fa44c8d0a777d4e425efca44f95e9b15_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa44c8d0a777d4e425efca44f95e9b15_JaffaCakes118
-
Size
2.8MB
-
MD5
fa44c8d0a777d4e425efca44f95e9b15
-
SHA1
3602ef0d6f81dc748096cb772059fbe314c4f37e
-
SHA256
a153eb2312ce1db39fc708b77a3cfd75e46e183219b639d3c7a537dd5f214b2a
-
SHA512
08fed3ee4b7cb2afeddbc2817f04de78db0ba6285127fc90a5aea93fc283cb19011973ebd38aa828d106682c6336e9449c183c593dc75b52d23b7e3e46b6ab9c
-
SSDEEP
24576:t1SMdVW/lEm+WPG8eKKZ0/u+g8yUiP5TwLsNZUbCqKyNxDRCv7fE12LyOFxNeP41:/SMd09ybPK3g8yUiJwLsbwCDRv7/ldFT
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa44c8d0a777d4e425efca44f95e9b15_JaffaCakes118
Files
-
fa44c8d0a777d4e425efca44f95e9b15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 14KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE