Behavioral task
behavioral1
Sample
fc87c8eced00bb793090b7aa8e56ad5b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc87c8eced00bb793090b7aa8e56ad5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc87c8eced00bb793090b7aa8e56ad5b_JaffaCakes118
-
Size
674KB
-
MD5
fc87c8eced00bb793090b7aa8e56ad5b
-
SHA1
abbe1905ddcab78c1a211bc55b62870eaa50e64b
-
SHA256
95261d26a6ff85fb0fc2967097fed375fcc38591d8c44e7cd948c22381cc9b85
-
SHA512
e014581a4d6ca1dd909ff095e1ec539980d0cfc2c1eea9861fa4f0f97fbd65012c27dc86f984b606f8be8d31e18bc4099edfa5327c2d25e5f57afaee91951cbf
-
SSDEEP
12288:7P07z5dVShk6LRanHY3WnpFzF6m4/ss3jsXnkCXOMV6oj+itp3hKWvS9xbIQsW8V:j0v5dVSsfom4/swpC+rWtrUWa9pumM
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc87c8eced00bb793090b7aa8e56ad5b_JaffaCakes118
Files
-
fc87c8eced00bb793090b7aa8e56ad5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 27KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 329KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 313KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE