Behavioral task
behavioral1
Sample
17765fde5f4e92d5198517bcbf1f5c1d_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
17765fde5f4e92d5198517bcbf1f5c1d_JaffaCakes118
-
Size
642KB
-
MD5
17765fde5f4e92d5198517bcbf1f5c1d
-
SHA1
fc83adb68e126fabec99fea9eca1017fba6cd9f6
-
SHA256
d5f8f82e938cfd8dc5d5e0456760cb5a055642d6af0f0ec7aabb431184290523
-
SHA512
e62e8c0ca3f88cd6fb071acb4bd36b00945ba55d5b1b0ea5353ebb106b97d3f4fe0d36f459fe777984479cc86156489df0c2df1ce191239012bcbcb5e09574fc
-
SSDEEP
12288:tzCQMKMGU9PzAkG+hmJ6zArNA7NA9sYPeoFPGGOUFYjWxs3x0hjqVVnxme:tbpMb9rArQz8OSsJGXJxVjUnI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17765fde5f4e92d5198517bcbf1f5c1d_JaffaCakes118
Files
-
17765fde5f4e92d5198517bcbf1f5c1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 628KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE