Behavioral task
behavioral1
Sample
fb45876c9350ffb040b9a54c2268d0c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb45876c9350ffb040b9a54c2268d0c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb45876c9350ffb040b9a54c2268d0c2_JaffaCakes118
-
Size
1.6MB
-
MD5
fb45876c9350ffb040b9a54c2268d0c2
-
SHA1
5a53830c98bf14fc02a6a4ec0c8288d32c445d9f
-
SHA256
aed75ba565c1c5ece93cb38b61470353c165beeee33d3e1ecc0fa6376cb1c2f2
-
SHA512
1f183d4ce2c30e783bf999acd9cdbec4e14631e03f50ba332d4c7427fbb9f379efb97a2311203d9b254657686972a6615016a44465776f20d0109b055f3b0a2b
-
SSDEEP
24576:urShNW3KDkxuSo77jjAvIrL9+spk8aw7E9rsrKcr4sv6cjDS6TXY0e3hHTLQWmeI:AoNWaIfo77PzrBq877EVu1TVuhdmeotf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb45876c9350ffb040b9a54c2268d0c2_JaffaCakes118
Files
-
fb45876c9350ffb040b9a54c2268d0c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE