Behavioral task
behavioral1
Sample
2c9b9de570b4ebb2711a69225e40a441_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c9b9de570b4ebb2711a69225e40a441_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c9b9de570b4ebb2711a69225e40a441_JaffaCakes118
-
Size
1.3MB
-
MD5
2c9b9de570b4ebb2711a69225e40a441
-
SHA1
38c224bf0da76fc6df4480c93e495e365d9114a1
-
SHA256
dc634edd5e33c38a5a7f2fee7a090bc2c8711cdf0c591e57cdd749c126ffe05b
-
SHA512
f7cb7fdac4de34ba0d621024a559706f74f016d755e06fff9600a8b6709ea3b614c9a27315ca7274ec667b6c8f12d1e88695c5a712a1624e32d002d3d9b2139f
-
SSDEEP
24576:RrA201EhGYtFj4InU2Qle6q/1A/FK+KKW1Nk7WSe595kwdMf0:BJJ4CU2QYXA/Ckmkwdl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c9b9de570b4ebb2711a69225e40a441_JaffaCakes118
Files
-
2c9b9de570b4ebb2711a69225e40a441_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE