Behavioral task
behavioral1
Sample
3fb5cb38e4304ba9e48d7f7496755db2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fb5cb38e4304ba9e48d7f7496755db2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fb5cb38e4304ba9e48d7f7496755db2_JaffaCakes118
-
Size
1.1MB
-
MD5
3fb5cb38e4304ba9e48d7f7496755db2
-
SHA1
afa2e999d0a9cb8b3a947ec07acd47bc65a73566
-
SHA256
b454b094c81e0388ee217f32bb0053ab32233df55d8eea9f05edcc9fb9bceb75
-
SHA512
781e540ddf2ea2be46b76d0108eb401032e5e00bf507aca60b6ed1c1031a818f076e99bebf4378dfcda35573bcd4ebc3cae549f990afb7d355f7dde5d37c8ac6
-
SSDEEP
24576:vtRQRZzYZ263ZTHjjbUpnLUW/78XARMn/kS3z+rbjYEU0Wxxb+1flHk:1RCcZt5wpDRRM/P3z+IXxx7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb5cb38e4304ba9e48d7f7496755db2_JaffaCakes118
Files
-
3fb5cb38e4304ba9e48d7f7496755db2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE