Behavioral task
behavioral1
Sample
24165e2da654f765f7db6648a36003f6_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
24165e2da654f765f7db6648a36003f6_JaffaCakes118
-
Size
768KB
-
MD5
24165e2da654f765f7db6648a36003f6
-
SHA1
577c42b0aeb91c706e6eeb04bd383362b03d4600
-
SHA256
cd5e087ff7c7a0692cedcbaaf3d44886978939e790a761a7231291a88188a84f
-
SHA512
b9b3c479be368d311f494ea6b5e2e117d757154710857a567728acb6f801afbff6cf3fae3831d62e57d35146585c370841c7969ad464bb789bbf7cd842fd7e2e
-
SSDEEP
12288:aohfZpiLWr27j5g2HnnFP8elnxxsoJeko5iGa4btPx4N372hjho6zU8oix0rQAaZ:aohfZpqpHN8ynxNo5/aQRx0w5xEckgwg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24165e2da654f765f7db6648a36003f6_JaffaCakes118
Files
-
24165e2da654f765f7db6648a36003f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 635KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE