Behavioral task
behavioral1
Sample
1abdca7c3040321b7913bb51637e75a8_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
1abdca7c3040321b7913bb51637e75a8_JaffaCakes118
-
Size
630KB
-
MD5
1abdca7c3040321b7913bb51637e75a8
-
SHA1
b82e2b732b96ead4cf2d91bf95cb945ad3459c1b
-
SHA256
f312aafcc806222a88b55dafef8c30614a93e54498968cd4692c27fe41f8c152
-
SHA512
a0e0439e63650f15edf0752a1cce8e2aea4add50770b1439cdd3b9651dde75128ceccd29995d3ce1cd5e93edae7299445b1187078ddd590237092902a38b1565
-
SSDEEP
12288:59ZDtIWo+WI4JHC5hkcyaRDHAb7tasgVonWgemnId3Nipj:59xKWo+P4JHC5ecvRDHA/tasConWIIds
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1abdca7c3040321b7913bb51637e75a8_JaffaCakes118
Files
-
1abdca7c3040321b7913bb51637e75a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 58KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 566KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE