Behavioral task
behavioral1
Sample
f1f36e99b8668724ae337b3e7ffdf72e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f1f36e99b8668724ae337b3e7ffdf72e_JaffaCakes118
-
Size
3.4MB
-
MD5
f1f36e99b8668724ae337b3e7ffdf72e
-
SHA1
528797cfd1889613f78545a763fe88c5b58ca606
-
SHA256
1a48e01dce3405b6ebd156e768accceea2aecbbbd8ea3f03f4910c9867a37e9c
-
SHA512
b1c6678955227b4f7b133d23379884f929e576dbddab476e9ecc9e001800b421decc3cfd72e36a1cc243dbcf09d8ea78d075e2f9f1e21a65bda02c1fc859fcb0
-
SSDEEP
98304:bwkrVPnMsrTCOuyFInrcaS7wQ5iy7gOYvDg/3:0+RMsrOjyFdMQ5xMOr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1f36e99b8668724ae337b3e7ffdf72e_JaffaCakes118
Files
-
f1f36e99b8668724ae337b3e7ffdf72e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 267KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 287B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ