Behavioral task
behavioral1
Sample
f51c5c0604d3ecd8752cabc0bdecfdb5_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
f51c5c0604d3ecd8752cabc0bdecfdb5_JaffaCakes118
-
Size
1.3MB
-
MD5
f51c5c0604d3ecd8752cabc0bdecfdb5
-
SHA1
a66bccf86dc2b13f4a1d75d8de4eefb7333d4260
-
SHA256
c249a324a48a4fda196e0d4340560e759c4335954fc0f1bb186cdbf860f95703
-
SHA512
968775015d7ec44817a345cb0a7aaf7530759419a0c747390cea15b7879f42fe257cb4280559b5e6c90381f0d271bd418771bd4981547f6aabbca8454c06fa06
-
SSDEEP
24576:T7sC2F2S0X9kS5XM2i2m9lnaBZ0sMYDkqGNR/+UNlvs2+WXOV:T7sCE2c2I91acgkqKR/hN6bV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51c5c0604d3ecd8752cabc0bdecfdb5_JaffaCakes118
Files
-
f51c5c0604d3ecd8752cabc0bdecfdb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 68KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE