Behavioral task
behavioral1
Sample
5e00879c62ddb84702e7c3a17b3ed5f8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5e00879c62ddb84702e7c3a17b3ed5f8_JaffaCakes118
-
Size
856KB
-
MD5
5e00879c62ddb84702e7c3a17b3ed5f8
-
SHA1
b0d634ca3a67e79fb6cc61888c53f23f0bb1f32a
-
SHA256
6d2725f093ae16b5cc9e352d0985902499afcd78c69d45e8d5b3627d87cf6471
-
SHA512
11a3ee53824e6d3872fb219177bda0438f07827a3e1fc246d881ceae254fbdc3715b1ac97e2053918072bed565b24b662ae3802e7d3158f381aabe32239b6495
-
SSDEEP
24576:/HkuBa3TvP4VjlVAY/rrU06lO8v1oLCkppMLv:/HkuBWL4V3AY/rrUF7YCk7u
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e00879c62ddb84702e7c3a17b3ed5f8_JaffaCakes118
Files
-
5e00879c62ddb84702e7c3a17b3ed5f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 232KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 604KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE