Behavioral task
behavioral1
Sample
ed76f3d15e7070a24e34249d8dc98887_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
ed76f3d15e7070a24e34249d8dc98887_JaffaCakes118
-
Size
535KB
-
MD5
ed76f3d15e7070a24e34249d8dc98887
-
SHA1
dc66765730a2a5f7ada4476ff3ed59889e46e5de
-
SHA256
bba03f4cb69abd4df128ff152cff22236e5e930c3b3a49c524a29a9d12c1a6c6
-
SHA512
7648dd61bbaf4fed55e5966a61aa414c78db976401ec884a7adbd56bb7ccaaedb1ba4ccf7bb5fc2c4ba8e715a9bc691d817b282bffdd3900e9b093459092426c
-
SSDEEP
12288:DL5rGXWbjjvK5Ju2+HE+y8G+c/wcWn68ZQZhZy61tg07a:X5ruWbjjvK5Ju1k+Fc/wci68ZshgItg0
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed76f3d15e7070a24e34249d8dc98887_JaffaCakes118
Files
-
ed76f3d15e7070a24e34249d8dc98887_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 107KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 417KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE