Behavioral task
behavioral1
Sample
3aeaca5b82b966c12b4ea9f3a90f0ec9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3aeaca5b82b966c12b4ea9f3a90f0ec9_JaffaCakes118
-
Size
1.8MB
-
MD5
3aeaca5b82b966c12b4ea9f3a90f0ec9
-
SHA1
5cdb078799d982169f904af176eb44ab409695a3
-
SHA256
316ab80abb48be7c9db633ba5c3a7e8b00618d4fb061d4700ff42487dda6f01b
-
SHA512
45f25e49aec3ac6eb475db36155c91e4ffab7d9a7d1dad20b08d80e90ccd83341bef9c297f83866654c1a42134d3bf6433a435a0c58703a29af27202dc7f7e0b
-
SSDEEP
49152:lc+zV9KmcThv37zLFtLsC2QQ26DgonUduJDJG:lv5Uv/ruJ2GgoUduL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aeaca5b82b966c12b4ea9f3a90f0ec9_JaffaCakes118
Files
-
3aeaca5b82b966c12b4ea9f3a90f0ec9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE