Behavioral task
behavioral1
Sample
2d0993653af9bfa2ab77e6d9d86a8159_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2d0993653af9bfa2ab77e6d9d86a8159_JaffaCakes118
-
Size
600KB
-
MD5
2d0993653af9bfa2ab77e6d9d86a8159
-
SHA1
39f1f3bddbbda760c55fcaae27b402f1d5a3f3d7
-
SHA256
2ac79d5697c0db624fb172226f9d9e4f978cf5ac33a279e3459d3f3f1b154202
-
SHA512
1a928913b8e30e7a0dc9377d6bfe35c2c41462faf2262b171b1191d193674741b35254bdad90135a92ba08a356c7bdf250ae68942f0c2fb2a4eec5040666f3d7
-
SSDEEP
12288:U7CJSESg83C1W2SMeXOYjfPX4vJrmLZZsb36jB1DFedlEulXm:WEC+W2UffPXiPKBlFKlW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d0993653af9bfa2ab77e6d9d86a8159_JaffaCakes118
Files
-
2d0993653af9bfa2ab77e6d9d86a8159_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 61KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 534KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE