Behavioral task
behavioral1
Sample
2f5e08e945c9ac6dcd2f76d9fbf13ca3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2f5e08e945c9ac6dcd2f76d9fbf13ca3_JaffaCakes118
-
Size
398KB
-
MD5
2f5e08e945c9ac6dcd2f76d9fbf13ca3
-
SHA1
b9341dfc143f5571659b266355b2145aeac35860
-
SHA256
3abcfdf31dde282ca06b51a86ec42fad35c4b0a5cb1a0444e4abd555ace9a906
-
SHA512
6e79adfe0c03bbb74d59a594c82d61a44b45e08ab0a33dbd7bd9acbfbcba4a0499cb5aa045fd69ddaff5eddbb8a6862da58f09c421a839ca3e5ad7bcff60c169
-
SSDEEP
6144:bcj9F2kf4eu/WFg0k2OfcPBl5PdcPjAwgu4paoQ4xrnCM8iWcNVhfZMJ17Oit1fI:co/Eg0e0PBlpdAWagxrmibVhfSJ1frX
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f5e08e945c9ac6dcd2f76d9fbf13ca3_JaffaCakes118
Files
-
2f5e08e945c9ac6dcd2f76d9fbf13ca3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 359KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE