Behavioral task
behavioral1
Sample
24cbbe7b53b29224e67dd952a5fbc4d4_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
24cbbe7b53b29224e67dd952a5fbc4d4_JaffaCakes118
-
Size
996KB
-
MD5
24cbbe7b53b29224e67dd952a5fbc4d4
-
SHA1
6f074e6d67be4ef9e43099aee1aae90ce04e4bf0
-
SHA256
6543ae2d6930c15b742341b65e364c9ba813db4ef7757b4e057c8296ff79fb4b
-
SHA512
d200903aa717fe8da0530a2da5e741688ca6fcdd58f457a8256053070998493c79e8f82fb50f6535bf7da999f18c71fff9596836bfedfcd103157e751182398d
-
SSDEEP
12288:t9ztjDvuAorbjey+jZez+BMr3ajeU/V7QYbsU0FxtaKjEKUODu/bF79UL8PH7o1M:t95WVrbP+jZUmVsYg7YKUgc9yGr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24cbbe7b53b29224e67dd952a5fbc4d4_JaffaCakes118
Files
-
24cbbe7b53b29224e67dd952a5fbc4d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 908KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE