Behavioral task
behavioral1
Sample
ff10937cf01773edd8bb795d6552a473_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff10937cf01773edd8bb795d6552a473_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff10937cf01773edd8bb795d6552a473_JaffaCakes118
-
Size
1.2MB
-
MD5
ff10937cf01773edd8bb795d6552a473
-
SHA1
ef3c120073889a0ec2ea2b6032e085f1d91b6897
-
SHA256
3898663df820568ce9e4d535e8ee1596556385a89680b5e50430fab330c7ef47
-
SHA512
5a1775885af8006c9daf285652b76674a81ed5163b1b7d2fa1c7b558e6062f7dde1fe26677d75a22def4f96c251939c1a14e82fd6e0fa2ed65050c88c9d92c34
-
SSDEEP
24576:1RiJc9p13Ogw0+2JtCxqfmYFKZLBzn9n1Gaa0xSRmjcaP1FJzGX+9m3PrU:1Rb/3VRptrmYFKZFJ1a0xSU97Zi+Qg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff10937cf01773edd8bb795d6552a473_JaffaCakes118
Files
-
ff10937cf01773edd8bb795d6552a473_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE