Behavioral task
behavioral1
Sample
2c24fa0e9ff12bf1e9201872abebdaba_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2c24fa0e9ff12bf1e9201872abebdaba_JaffaCakes118
-
Size
820KB
-
MD5
2c24fa0e9ff12bf1e9201872abebdaba
-
SHA1
cfac0bc3850eac43ded2eb6b598d322dc8b99936
-
SHA256
aeb771273b09a85548393e8a155f72aac775c8fca1f0fd1f5150d3af5db5c396
-
SHA512
d7331f8b8a6734b927f1718e4c99441abbebcb89c27c769e058d42d9ae5872e0c42d022c8283fd0e9f7d7a8e498cd560bcaf90afc08cdf73705977591f75057f
-
SSDEEP
12288:B/9nynnj/DM2CwPAnJLQRvzt/+zoqx7uLndC2TR/0Gmt29KJLd3j+KqY9NF+q7MU:l9nCPM2lAJ3oqWC2TRr6QYf3IDDM
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c24fa0e9ff12bf1e9201872abebdaba_JaffaCakes118
Files
-
2c24fa0e9ff12bf1e9201872abebdaba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 64KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 744KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE