Behavioral task
behavioral1
Sample
0a5e7a3d05521840338211fbd3d764f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0a5e7a3d05521840338211fbd3d764f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a5e7a3d05521840338211fbd3d764f0_JaffaCakes118
-
Size
244KB
-
MD5
0a5e7a3d05521840338211fbd3d764f0
-
SHA1
1b0b608b238daa6f4c46d6f051ece866d4e2f532
-
SHA256
edfbbb0a8e9e5c923805757bdcd853b7eb455124ed649e55500f45fcbd4ff623
-
SHA512
f01d17fc5b3a4c3c5ddf1bb624aa490076e17b39e0e6a39a8f446f021cf3e716d9ea47c01f1472ddcfe21646c9d0a26acc97b7976bbc11a37ddf6a9d39dd8dc5
-
SSDEEP
3072:Ac4jOmKrcq0/0vVR6OtCh3H8A4cl1knns0NfqXDWfJJ+EtJCBSwsurIQlDXWL:nmKD0/0iOtm8ZnvxJRiwujJWL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5e7a3d05521840338211fbd3d764f0_JaffaCakes118
Files
-
0a5e7a3d05521840338211fbd3d764f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 82KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 834KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE