Behavioral task
behavioral1
Sample
25f8da3079f8568ad6f07d3dfce5f5b7_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
25f8da3079f8568ad6f07d3dfce5f5b7_JaffaCakes118
-
Size
672KB
-
MD5
25f8da3079f8568ad6f07d3dfce5f5b7
-
SHA1
9edc5f03aaddd0fbd4ae1548c3604738420ae607
-
SHA256
7d581d58b0879c5b08471ac22b9125627d4e9c29b28a32b96bd40e7cf647cd46
-
SHA512
82f9a5fff1486a75622b7cf72d67655bb7b7dadb19202b4f7cf6f95542a7d9688720a981b934f66b9c1474a1614a3a87b0aa3c10b2b99cc12d31f0d6794a4ce3
-
SSDEEP
12288:bXN0m0LrZuB9r1cpCledSZkTRPWJbcIliG6kVT+O3zu3QQ:+Zm9r1colqSZfAkiwDa
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f8da3079f8568ad6f07d3dfce5f5b7_JaffaCakes118
Files
-
25f8da3079f8568ad6f07d3dfce5f5b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 604KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE