Behavioral task
behavioral1
Sample
fcfd27ef6643ef721a53509e2d046977_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcfd27ef6643ef721a53509e2d046977_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcfd27ef6643ef721a53509e2d046977_JaffaCakes118
-
Size
1.2MB
-
MD5
fcfd27ef6643ef721a53509e2d046977
-
SHA1
a2a6a575189e44d4686675d13247a6a3bc0ae4aa
-
SHA256
3ab3e7e99b8a239bf7ac66c5f11062eff864fbf9948fe2a0495d31865624ad41
-
SHA512
4dcf59d4f74b83961648fcf0b69b69502383405c0dee95fe97fcbdf376e903805ee9ef91d28f17981900f729ccded629923d5c69341602a23dc178367306ba71
-
SSDEEP
12288:A/0N4+iCW1/LQGlv6NqZ6vtoEcnOVQOl7saKsBFZ9VJA5bESsxR6PobrSP4eg8vO:Aw4+TINv6kLOVtP5QEFtbAvA17MiJUsZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcfd27ef6643ef721a53509e2d046977_JaffaCakes118
Files
-
fcfd27ef6643ef721a53509e2d046977_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE