Behavioral task
behavioral1
Sample
04465ff7e9cc8a762f33a241e4c54294_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04465ff7e9cc8a762f33a241e4c54294_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04465ff7e9cc8a762f33a241e4c54294_JaffaCakes118
-
Size
1.3MB
-
MD5
04465ff7e9cc8a762f33a241e4c54294
-
SHA1
8d341da8f19fc84ff5582e7ed48bba5e7b8e5936
-
SHA256
e661f4919026108d7251da1e8d38f8bfc2a5f8ab1ac4860ade1ec86369db50af
-
SHA512
8036b3ba3c6367ca84e5274f5c289a5b4215aac287983e602bb848aec771f1e4a4262c439476eadf796f4b309ff225f9077906a3f83d80d854733ed578711890
-
SSDEEP
24576:CrA2Z8+ZJeXz8RkPSianI0m0v9c+l4LtcVL5zf8uwEwig0gv3Azd:EZ8sJowIt0uLtcB5fGiJQQzd
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04465ff7e9cc8a762f33a241e4c54294_JaffaCakes118
Files
-
04465ff7e9cc8a762f33a241e4c54294_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE