Behavioral task
behavioral1
Sample
1603e2a4965cd1f8ca463f7c1cfcc0f8_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1603e2a4965cd1f8ca463f7c1cfcc0f8_JaffaCakes118
-
Size
1.8MB
-
MD5
1603e2a4965cd1f8ca463f7c1cfcc0f8
-
SHA1
2ff944a4b1211f80532c4b5650466c031ae74af3
-
SHA256
60e0d095e03f380453fdbb318796df74fcfa01b4aa3128880e54820174f0db2d
-
SHA512
aba78d1b3881e57bca000f204ad9433fcea868ae9698ab3d5b9582e915acbcb108659171934210a62ec28c724ff9ee4b236c0bd313ced766431d4235b7409534
-
SSDEEP
49152:pvHUvql7Vfrrs3OpIWpZOPbum/ARmprd7:BUyldXUOnpZOPSxQNd7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1603e2a4965cd1f8ca463f7c1cfcc0f8_JaffaCakes118
Files
-
1603e2a4965cd1f8ca463f7c1cfcc0f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 166KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 802KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE