Behavioral task
behavioral1
Sample
2e6cfaa139228b56652d39f358a283c7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e6cfaa139228b56652d39f358a283c7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e6cfaa139228b56652d39f358a283c7_JaffaCakes118
-
Size
1.1MB
-
MD5
2e6cfaa139228b56652d39f358a283c7
-
SHA1
d1bedfe32a277075427ed6a2a06ae16529d07be9
-
SHA256
d941a076eaabd3026692cfa4d78add3c728fe7aaded7f192ffbff206ff2c295c
-
SHA512
ee0d50554108fd9c3869355ae1b1e7edce288f0580b2e5bddb7118938df5b5becf9a84abe1d5a63de85999157443bb02236cfa61008f344af02ffcf9d11d8d0d
-
SSDEEP
12288:u874s7/le04eC9RUgT/QE2oZIEaN2XiPZ5grgRDtqARrXzvoTlBpElHAHNWooGxO:3vPgjSPz1vcHOlgHNWTORCJ8z2eT2Xv
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6cfaa139228b56652d39f358a283c7_JaffaCakes118
Files
-
2e6cfaa139228b56652d39f358a283c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE