Behavioral task
behavioral1
Sample
1507c097963b69fa4f42bb539c1fc21e_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
1507c097963b69fa4f42bb539c1fc21e_JaffaCakes118
-
Size
2.2MB
-
MD5
1507c097963b69fa4f42bb539c1fc21e
-
SHA1
f8746360c7fc44f2497a8f7e7fc4afbf99b00df8
-
SHA256
b8b2f6b43e0fc050c589a88d5a7edf455b66087d4c002fc1e31825f1e0bf8ef9
-
SHA512
3ad6918ebf2e95493745cf2cb0c078e7ea09de506d0b95208f30841795d01d906e8d732011f7ac434d1fef37ae4cc0d6e12124017c30cd9e395b10a3aa2e54fa
-
SSDEEP
49152:VkrfEVD74yQfly8wuHu9gIRZhrLatGmu7n7Bj5djFt:VkrMRCljHu9gIRLrLasBjrZt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1507c097963b69fa4f42bb539c1fc21e_JaffaCakes118
Files
-
1507c097963b69fa4f42bb539c1fc21e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE