Behavioral task
behavioral1
Sample
2e97e9fecc8840cb438269bdd92301fa_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2e97e9fecc8840cb438269bdd92301fa_JaffaCakes118
-
Size
2.8MB
-
MD5
2e97e9fecc8840cb438269bdd92301fa
-
SHA1
a40c1eb360a37fd56406a7d05549fb06ce5ecd9f
-
SHA256
13657c0d7541684fd4a84b33bb487c2118447aff2c74ca4316ec3ae1e2897fd5
-
SHA512
d472549be97958f6249135d1e0d03a999162b8615077b7d44d9b5d88f006582f36e4a54fcee8b1f77add96daf4bd2316512c273b76d06f195ff52340d8b6dea6
-
SSDEEP
49152:aTvKej3v6Qcg79O9fJMpU1vuY6pOemcOcn9KHo4lGsVcRiYFQySTRpS7:YvKP0B5pU1VeNOC9Eo9sVcRiY6rTHc
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e97e9fecc8840cb438269bdd92301fa_JaffaCakes118
Files
-
2e97e9fecc8840cb438269bdd92301fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 557KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE