Behavioral task
behavioral1
Sample
2cb1b1c2238acc8f47806ae70e1bf7dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cb1b1c2238acc8f47806ae70e1bf7dc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2cb1b1c2238acc8f47806ae70e1bf7dc_JaffaCakes118
-
Size
79KB
-
MD5
2cb1b1c2238acc8f47806ae70e1bf7dc
-
SHA1
bb772b5815be2e180f2ba901771576920abe63a5
-
SHA256
a91945d859abf3a74781de250027fb3a1720108e0fd3a947ea5aebbef2137602
-
SHA512
a5c600decfdea1500e008873217b2528dbe46aabc9047aa817fe34385b2307942353379f042853a173a7f6a1187a78e9f59d50d79e8763317ff14ffa43351be0
-
SSDEEP
768:VMIK4v/CFs7wi69Wk785YlKUT1uoFfr0paJUrZKZDOrRpS0Ng13+twsY/a:OiaFji7k78hGNFApaIMQpSyg13+Sa
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb1b1c2238acc8f47806ae70e1bf7dc_JaffaCakes118
Files
-
2cb1b1c2238acc8f47806ae70e1bf7dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE