Behavioral task
behavioral1
Sample
3ecdd02c42208d42ceca64aa5e0e5eac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ecdd02c42208d42ceca64aa5e0e5eac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ecdd02c42208d42ceca64aa5e0e5eac_JaffaCakes118
-
Size
1.8MB
-
MD5
3ecdd02c42208d42ceca64aa5e0e5eac
-
SHA1
22cf468543db1190e9bae939b1180def54095c3b
-
SHA256
77c8efd479e18cc64b85a9ecab5715d58997aaf9022dc9a1667f7444438a0c43
-
SHA512
695856e2973e77432d1fcf7372b1eb05ee6aff097a973e53812535af1acfd0123eebd2661814acaf3a37fbfea7a3ac9208fda8a9cc1a51050ddcbb04148af273
-
SSDEEP
49152:nl6eVzXgv895KTO6kXqJBhHr8idZ7Oy3/5f:l6wXgvR9Bhgi9
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ecdd02c42208d42ceca64aa5e0e5eac_JaffaCakes118
Files
-
3ecdd02c42208d42ceca64aa5e0e5eac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 542KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 12.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE