Behavioral task
behavioral1
Sample
062bf19c78f2c1e03799af5be9ad3303_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
062bf19c78f2c1e03799af5be9ad3303_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
062bf19c78f2c1e03799af5be9ad3303_JaffaCakes118
-
Size
1.3MB
-
MD5
062bf19c78f2c1e03799af5be9ad3303
-
SHA1
a17c3778544e842f49769df2757e059fb8092f09
-
SHA256
02ea5db46c1d79f174ef79b1a8ecf7a5910d02ac2fbe7816d665cc1b5a5514b2
-
SHA512
3041d891b7d2ac3d1e2a06a0f72fae5a4513840219429af0be2830053b2d43d32e5cf3cb05a67e6aa16687a70a78f1652202700e968da014f76cc59179dbc8d7
-
SSDEEP
24576:XDgu4ET/WCG+abpQmJAiCr7DlDUc0K1tBF6xe+SAYmW5Nm88saCFYr9:kC/W15Z0r7ldhp6nQp/NFYJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 062bf19c78f2c1e03799af5be9ad3303_JaffaCakes118
Files
-
062bf19c78f2c1e03799af5be9ad3303_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 117KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE