Behavioral task
behavioral1
Sample
06001c4342202488060fa77f75f2a26c_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
06001c4342202488060fa77f75f2a26c_JaffaCakes118
-
Size
536KB
-
MD5
06001c4342202488060fa77f75f2a26c
-
SHA1
a005a8c00281e602b6ccf99103e6b0d12e021a39
-
SHA256
50a0e2f11c30884c7b7695613194666be882b7e7f00d74abcf3dc8f6a046b1ad
-
SHA512
5f8ed5866cdd7d81a23c8d70bc3b96512e9a52f0885381797777594ee7c54d9599bb9782bacb865b95a25489aa101ddb7bdea0a3422a7950bd0ed6ff046303bb
-
SSDEEP
12288:S9BoL22U7ZdP5jiklBTqZHACPLTVgTZsJHPWFvSPrR039j0xUF:SXmJUNdP5jhlBTnCPIZHpwR0NgiF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06001c4342202488060fa77f75f2a26c_JaffaCakes118
Files
-
06001c4342202488060fa77f75f2a26c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 418KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE