Behavioral task
behavioral1
Sample
2c8bff2e7d16ecaf7b482dabad323e6e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2c8bff2e7d16ecaf7b482dabad323e6e_JaffaCakes118
-
Size
2.3MB
-
MD5
2c8bff2e7d16ecaf7b482dabad323e6e
-
SHA1
c81a89a6883986d767d9fa0be45d767b009747eb
-
SHA256
2e93055ac4a16f1053ccf1e753ecd6c49380e557e76625ef4a43f33c00d16bc7
-
SHA512
d130057730bb80a062a7cbf5d06812291616f4c704103e339bb43014e595c410241044a9ff6020fdae86c8bd9607918c00a9c487b3c03750011b7dec86e9159e
-
SSDEEP
49152:+WhS6tKQA2KwtM/a3veD+LOPqEIQ3OHapsF0X:to6tKQAhwtSa3GekqEIQey
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c8bff2e7d16ecaf7b482dabad323e6e_JaffaCakes118
Files
-
2c8bff2e7d16ecaf7b482dabad323e6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.1MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 891KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE