Behavioral task
behavioral1
Sample
0f08242193ef478520c10f4c02dcbaef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f08242193ef478520c10f4c02dcbaef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f08242193ef478520c10f4c02dcbaef_JaffaCakes118
-
Size
1.1MB
-
MD5
0f08242193ef478520c10f4c02dcbaef
-
SHA1
a596ad944d01ae94d7a3e734b3293202d7fb3ca4
-
SHA256
e0081723500d2a738d17118eb1868ff23801485ca04a24ea97e988a9775feacd
-
SHA512
aaefd1d5d33eba4797b0658a98124cb4ebd4c0e1b8742f22e8b027bac315edc3b40a4551747c7fd6b79e2d16e4bd4fc067622af6d78aa35cd6de4bbfa8f3b8c7
-
SSDEEP
24576:Z2+V10ck9jGLdrLiPu0YgKFG1GvZ8/it++6rRNsoGP9cNwQaslmu/gJ:s6TkxGLdrTIm4Ge6Ebfu9cu214
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f08242193ef478520c10f4c02dcbaef_JaffaCakes118
Files
-
0f08242193ef478520c10f4c02dcbaef_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE