Behavioral task
behavioral1
Sample
faf05026fb6c9a80345b373f816b1f7c_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
faf05026fb6c9a80345b373f816b1f7c_JaffaCakes118
-
Size
544KB
-
MD5
faf05026fb6c9a80345b373f816b1f7c
-
SHA1
f1e7d3df58b28309641eee7a85226b4c05d52b72
-
SHA256
30fab45c1ecae14ca0a1ec21213103218d3e5dd133f0804bfb25e32e169f7ea1
-
SHA512
244c90d909bf4191611498a68e488a787c160069bcd143c27a94e4ff003ae2ed76ee36115fee7cdcd8a81c729a791db1c1caa4d65622e2653f1d3770e081add9
-
SSDEEP
12288:u3d1HHefDphWDUet+hqAdGoD35HH2XdKwc+3KmbuJYkiKWYmb97ukRINni016dVx:uiDODjfA5WNnx31fKWfjRYi0o7x
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf05026fb6c9a80345b373f816b1f7c_JaffaCakes118
Files
-
faf05026fb6c9a80345b373f816b1f7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 508KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE