Behavioral task
behavioral1
Sample
190c2451b538a8644d06173c191c800f_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
190c2451b538a8644d06173c191c800f_JaffaCakes118
-
Size
1.7MB
-
MD5
190c2451b538a8644d06173c191c800f
-
SHA1
8bbb24b7f60ad60db346d507d1b89f6653575352
-
SHA256
588d5b61693d2b8cc756c0338ca6a9fb64636dded26b30c956ab3a24336b9574
-
SHA512
3ae0febc6f32949a5a63cefd940c5c44b99988a6b6a82bad80b1f9a5f807bf8e3c3f6ea85bd50ac94d6e60048f16573e1786cdeed7cb60f4521e8f49b4831f3b
-
SSDEEP
24576:bandLq5Ccim9oRHbSwbplM/EA+2dT4OQxOjJjj4aM5lcgu:2Lq5Xim9C+9+29nQmFDM5li
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 190c2451b538a8644d06173c191c800f_JaffaCakes118
Files
-
190c2451b538a8644d06173c191c800f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 308KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE