Behavioral task
behavioral1
Sample
16366ec7f760690ee41d3b195c0a6491_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
16366ec7f760690ee41d3b195c0a6491_JaffaCakes118
-
Size
1.9MB
-
MD5
16366ec7f760690ee41d3b195c0a6491
-
SHA1
930f9308fc540d4dd6bc62dbdff451bc8fac62cb
-
SHA256
4a4e71bfb7c116bd161ee6d99daa86cc816cc4d3a468b53c5ee28173a7309e83
-
SHA512
769c530b43e2696aa79098f42224b1d5668f0a03130b4d1e45e1754c643bca436fa731af9d67e2247d8c8d0a5f4fb9ebfe559d73a58eb3f858049acee081458d
-
SSDEEP
24576:mH/7MySvDiHHw+CpMjTyo2qL2pWBF8tFwdDXD8l9muZrjFKG/9yNpGiHp0Arsw7I:mjWvDiHHw+QMfpLDA6LuJ0G1Q6OWuc
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16366ec7f760690ee41d3b195c0a6491_JaffaCakes118
Files
-
16366ec7f760690ee41d3b195c0a6491_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 611KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE