Behavioral task
behavioral1
Sample
0c7c10ed3f6f1a05053fbc9aebe8d0f9_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
0c7c10ed3f6f1a05053fbc9aebe8d0f9_JaffaCakes118
-
Size
816KB
-
MD5
0c7c10ed3f6f1a05053fbc9aebe8d0f9
-
SHA1
b3fb333f7a2ab1c207e4850e768bc410800a400d
-
SHA256
36bf44d9de7e69454dd6a83e88ebbe9afe9f1fd425cf96df9220a3aa61a7d030
-
SHA512
b6642934a6d020f46f239175ed1166845dcedcefe120b85d48b124652d4d17087557d250765e245fecb4ede4cba7b7865f081106bfd941d39441d33c55f9a112
-
SSDEEP
12288:gbGrsZy5/DllYcLXHpgr8v0hlWx2KWlMdNXjCbGCLuzcVd15VcJrv:VAY5/DllYcLXJgr88hw25aNStD1MR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7c10ed3f6f1a05053fbc9aebe8d0f9_JaffaCakes118
Files
-
0c7c10ed3f6f1a05053fbc9aebe8d0f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 749KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE