Behavioral task
behavioral1
Sample
255fc72fc068f4a01297ad034c997000_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
255fc72fc068f4a01297ad034c997000_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
255fc72fc068f4a01297ad034c997000_JaffaCakes118
-
Size
4.9MB
-
MD5
255fc72fc068f4a01297ad034c997000
-
SHA1
82729017a381cdc4b864050d327d5d1c9e39e26a
-
SHA256
0a9dd2ead3fec31d3d9f4611bb7c9259a8313424f1c432c98df750d526aada31
-
SHA512
3cf8a3e2711cefb98d5f8fe101c7dd7bba3a58602a5485f893aa8d592d63252521e6b1c5da7308cd016aa77e048eff1b33dc47a40efd0a7d71600e81e0bd5272
-
SSDEEP
98304:mbxxarRjebdvQvhiKgtKi6wQ42I0DmQDQ4HPkyRyJLCn+5Wcqk7b7fHS:4xxawKiKgMG2I0IByRLcqibb
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255fc72fc068f4a01297ad034c997000_JaffaCakes118
Files
-
255fc72fc068f4a01297ad034c997000_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 423KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE