Behavioral task
behavioral1
Sample
f0094733b823cc88e4f1e9bca4b4e9d6_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
f0094733b823cc88e4f1e9bca4b4e9d6_JaffaCakes118
-
Size
3.1MB
-
MD5
f0094733b823cc88e4f1e9bca4b4e9d6
-
SHA1
b06b620d500bc4a2d02682d81acb2477c8cfbd5d
-
SHA256
be78add2d69a7f74a97df8e6cda471ed66348ac752fb53baa0c9729c163f2737
-
SHA512
ad9fa28925696eb7d62b1e5a102fce420bdc9288bc1ee9d34031ea9d1aa076f008df24c83532dd00bbc2e568e50b58192573b3e67960d5b00c17c7e0c82d44f8
-
SSDEEP
98304:gYiLxB0lF2hpGWA7NEo+Pb3aUW3Q9J9Dpg8Z:PiLxWP2hpO7NEo+mD3MJ9V
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0094733b823cc88e4f1e9bca4b4e9d6_JaffaCakes118
Files
-
f0094733b823cc88e4f1e9bca4b4e9d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 16B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ