Behavioral task
behavioral1
Sample
520bef2d055508f54f5a5d7c784bdfbc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
520bef2d055508f54f5a5d7c784bdfbc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
520bef2d055508f54f5a5d7c784bdfbc_JaffaCakes118
-
Size
500KB
-
MD5
520bef2d055508f54f5a5d7c784bdfbc
-
SHA1
46e59556776e08907d4ac8d8749e9bb2f8fb1e55
-
SHA256
686a6b4c351491fac89e37746d3c2f9948238fafbf3949e5603fb6a32a09ef49
-
SHA512
3dc6bec1366846e02f06394df8749664ad239563cbfedecb2c5183bcfc4f86a17148b77240ab5466117c5c3a010e357b8bd47b99f501fba6760f0476f0a82949
-
SSDEEP
12288:KrzbapugXpyKBxhjzikn9c7u/roFwb7azebp8I2Y:K3bakgXpygtTGScFwb7Fb6k
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 520bef2d055508f54f5a5d7c784bdfbc_JaffaCakes118
Files
-
520bef2d055508f54f5a5d7c784bdfbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 378KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 790KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 630KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE