Behavioral task
behavioral1
Sample
2916af8df19554c4c6e5e21025b15d99_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2916af8df19554c4c6e5e21025b15d99_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2916af8df19554c4c6e5e21025b15d99_JaffaCakes118
-
Size
1.2MB
-
MD5
2916af8df19554c4c6e5e21025b15d99
-
SHA1
f28647a9ff056d447c456ec6c3ceba26a5f7cd3e
-
SHA256
e70fa33ddd3a814d870a28ca83645d2fe959c2313fad485ff347d1306c24df99
-
SHA512
5474224c983b3b20e9e6adffa67d6b5f1b4cf523f8bb37d7646b4fdd98de9a1e76cf1253aace79e5124f3ce6f573799baef40bc97b0d8cff0a3907c2931ab6dc
-
SSDEEP
24576:bZDb/aKEi/IyWPnXgtTjP7TPv+wYip1rp30DjcGh8R2MzKVrlF:NbSM/IySgRjjTX+Fe1kUGiQrz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2916af8df19554c4c6e5e21025b15d99_JaffaCakes118
Files
-
2916af8df19554c4c6e5e21025b15d99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE