Behavioral task
behavioral1
Sample
55445f3508c7122d60a22624b98b8e48_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
55445f3508c7122d60a22624b98b8e48_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55445f3508c7122d60a22624b98b8e48_JaffaCakes118
-
Size
441KB
-
MD5
55445f3508c7122d60a22624b98b8e48
-
SHA1
f582260e9ff85f8cacbce3f262e77ad9541a4d23
-
SHA256
02c0fac1b8655232bd731da72b19fe6daf1ce7c33f754b1c4a7485bb543f2fd1
-
SHA512
f0d9740288c82eaa567c0a96a2f6de0a77dda5d30e3068109881c64573c1b243053cfeaa371e6503efb043a4fab6eff8f5219c7dc0311739b63f5fa8948d61c6
-
SSDEEP
6144:K89MIv8vJJcod/wHjtxfmj6zPSgw2DtM1tH/GJJvBTFKO2a9qeXQ9Ga3UvPwN:K3IUJZwDtxfQYZ/afGJJThBsegc+UvO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55445f3508c7122d60a22624b98b8e48_JaffaCakes118
Files
-
55445f3508c7122d60a22624b98b8e48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 322KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE