Behavioral task
behavioral1
Sample
fb626420f5fe5910a943314e2ec9f6a7_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fb626420f5fe5910a943314e2ec9f6a7_JaffaCakes118
-
Size
2.9MB
-
MD5
fb626420f5fe5910a943314e2ec9f6a7
-
SHA1
499305c3ac90d160ce9a42f31236fbe3c966892d
-
SHA256
fb0ccb6e367ebaa52874292e05adae9cacafb2b42a8526bf1cb6028e753b9b7d
-
SHA512
96aa1f3e0b151baf1d3adbe109db36b32907ba54859fa6dfd96bca2a1b88db12cff367eb0f8860af0fc39d2ac0c3a8d4ce0d3523edb40fb84f25eda45a4541e6
-
SSDEEP
49152:5f5PFdGyL17PWkY3wfN8LBO881oUkii9Ps4c2vCSK3o1zRaXV+Wp9CjMIJH+eRui:5kuzWkNN8LBOrjY0QKUk7yVkeRL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb626420f5fe5910a943314e2ec9f6a7_JaffaCakes118
Files
-
fb626420f5fe5910a943314e2ec9f6a7_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 288KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 47KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ