Behavioral task
behavioral1
Sample
189d584493b8513b72cd136b0d3fc735_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
189d584493b8513b72cd136b0d3fc735_JaffaCakes118
-
Size
1.8MB
-
MD5
189d584493b8513b72cd136b0d3fc735
-
SHA1
5cc46dcb1c68448f767376c90acb03b9a6bbda18
-
SHA256
d3e6fb17d63b1b0b838be83e30acdec4be1a2e39b2f937645ade60d2e00120b6
-
SHA512
f336082072b594d6f204976ff04ec63b4c762b292ced6e0606338b51a2fe679ae00b994498ab8ff794c49e9f3fe622eb79478d96f404c958efe95a08679a1428
-
SSDEEP
49152:d1FZlkjvl7n4SNx9bNi7JtHyaCQmh2Ly0qAQzMtv:TFZe5/9bNi7JtSaClvAf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189d584493b8513b72cd136b0d3fc735_JaffaCakes118
Files
-
189d584493b8513b72cd136b0d3fc735_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 612KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE