Behavioral task
behavioral1
Sample
15117857a0032d3c5a335ac4c41135d8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
15117857a0032d3c5a335ac4c41135d8_JaffaCakes118
-
Size
1.3MB
-
MD5
15117857a0032d3c5a335ac4c41135d8
-
SHA1
a9f7df25ef933419f96db801f9e39d796a1e5af4
-
SHA256
ca817f16f636dd4b2b3257a68a9a2fa2c45d7680c5349106418f8dce3b35f6ea
-
SHA512
d305df20944096c340dfa80e60781b44abe9820cf047285876f87b1184d78809fe75a1a5e26b280a83e910bc9739db6bcdd12747de79f5a88a46b2318c513541
-
SSDEEP
24576:UzS/CjmnOuYlWAyISUhmfeMez2qt9DLLJhmxJusWmdz6Xc3jnCXEa:zKjmnOuyWv7UhJ3XtVLLJhmXusNgXMry
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15117857a0032d3c5a335ac4c41135d8_JaffaCakes118
Files
-
15117857a0032d3c5a335ac4c41135d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 315KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 436KB - Virtual size: 875KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 607KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE