Behavioral task
behavioral1
Sample
25a88764aa83912f104e5af0b2bed854_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
25a88764aa83912f104e5af0b2bed854_JaffaCakes118
-
Size
796KB
-
MD5
25a88764aa83912f104e5af0b2bed854
-
SHA1
b71f8de3d10a7f11fb918b9f860696f32ce56ee4
-
SHA256
a0e9c6f24d3be919d403d20ad0f96f4a20170c7095ba0a2993a7ea0da7bb2bff
-
SHA512
e454bb20956950b3f078e39d57fd19dc79f78a0c7181fcddd6a53f5792e4ce687269c0e9473dc7e1b4bd7879f712f8e58b5546c392e09d13314f63d7b43745f0
-
SSDEEP
24576:b8hdCK0yXdOkdIrHJ0OdYjlaZ5+8OOzfRpeA4:bUpvdIndYxi5NOmJpY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25a88764aa83912f104e5af0b2bed854_JaffaCakes118
Files
-
25a88764aa83912f104e5af0b2bed854_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 109KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 652KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE