Behavioral task
behavioral1
Sample
fd533ac1e8f81fc3ffb8bcebb586e48a_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
fd533ac1e8f81fc3ffb8bcebb586e48a_JaffaCakes118
-
Size
1.6MB
-
MD5
fd533ac1e8f81fc3ffb8bcebb586e48a
-
SHA1
b9ca7a600d8635cb57a336698c0c525e9b290c4b
-
SHA256
21fc0abe0bd49ac100693a58ce0091b0c30453177686235cf1400922192e55df
-
SHA512
5d17917ece1da6d6ae81feaa8e5c627a551e695af110ed4f82c5349a47b96fad01d8557278d56c1e6b42a734e5a32da93dc06e0a05fe36d7e733a13ea99a43e4
-
SSDEEP
24576:eGrxBQmqM1kgjjMs6uShGfM2pfkuVFp4P+v+bmOm2hOZvGnOnzAbEKIx0OPUj+Zq:HxUg0+7f5Fp4mTOm2h4oDc+z
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd533ac1e8f81fc3ffb8bcebb586e48a_JaffaCakes118
Files
-
fd533ac1e8f81fc3ffb8bcebb586e48a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 313KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dgd Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ