Behavioral task
behavioral1
Sample
381710179a53be312cf608eef3a85cf7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
381710179a53be312cf608eef3a85cf7_JaffaCakes118
-
Size
937KB
-
MD5
381710179a53be312cf608eef3a85cf7
-
SHA1
5737933fa29d57b38d62a91eeed7c2f5516814ac
-
SHA256
62725693620df519498fc3ad689367b1803e187fab98822f686c9b56b63c02cd
-
SHA512
46a32f0f7da7f4f65cf13fad0883fd673cfe6b10bec4e0ad0c74135e8bc0f4552ef4db5c41af82f1273dcc1da461d54fe1028da690b9bedd2f2afa9517ce6eaa
-
SSDEEP
24576:QHSPmwTWVoZ0bP0yg1ag2Odt8UmPMTnCl7daQ1Jj69:t3Ut+gq4dJ1h
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 381710179a53be312cf608eef3a85cf7_JaffaCakes118
Files
-
381710179a53be312cf608eef3a85cf7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 235KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 596KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE