Behavioral task
behavioral1
Sample
302dfbddde652787477c7dc6ca2de60d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
302dfbddde652787477c7dc6ca2de60d_JaffaCakes118
-
Size
1.1MB
-
MD5
302dfbddde652787477c7dc6ca2de60d
-
SHA1
9bfc91ab7af37ab8cf24387e126dee5afe864412
-
SHA256
f4464f8d2837fe18121351709dcac9aba99712597d7545865b03395781f2cf69
-
SHA512
134a94fcb4e9cad61beb11ef9b9261fd32ba5acbf422ea524daeb1e3bc8b91ba7e020f52ff99de560ff20e67b899b84abd100c95e9faf5afd344eae3c1426737
-
SSDEEP
12288:XAqWNKscsxqTt1KPjrmUt+Ishmw3Jg5/nfLb3JHCYpvD2NYzUDapsl2iC8vsIme:mdfqR1Kr5t4e3VtvyezPpsDNyE8lTV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302dfbddde652787477c7dc6ca2de60d_JaffaCakes118
Files
-
302dfbddde652787477c7dc6ca2de60d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 308KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 819KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE