Behavioral task
behavioral1
Sample
0e276bf59fac80e87fe78fabbd49a467_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
0e276bf59fac80e87fe78fabbd49a467_JaffaCakes118
-
Size
1.4MB
-
MD5
0e276bf59fac80e87fe78fabbd49a467
-
SHA1
851c854c4456d0f69984a8926d7807c6b4ae3561
-
SHA256
026fee1722077d86ec31ac2fdb100f540ecbfdaa9897c115558cf6684798d329
-
SHA512
b9b8cfe3f48c3f2d9bea8e6c27c95fb48c7ab287544f213cb5bcb8fe1bfe69d6c2ea35661f1f693a4dd011e8019b946a3d0895d720e39f87b948aedd191efae2
-
SSDEEP
24576:/+yJDG9/AzgfjtcpY7gB0Nah3rcm3Z1y7RwvLwNIUxK32EwwqyO98CuXMM/YglB:/+yeoQcJB0sPww6IUE2EwByO9pMP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e276bf59fac80e87fe78fabbd49a467_JaffaCakes118
Files
-
0e276bf59fac80e87fe78fabbd49a467_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 963KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 636KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE