Behavioral task
behavioral1
Sample
5e25f05ac6bf775e8f5f516f7b5daec5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5e25f05ac6bf775e8f5f516f7b5daec5_JaffaCakes118
-
Size
708KB
-
MD5
5e25f05ac6bf775e8f5f516f7b5daec5
-
SHA1
151d5fa0abbd421c43b4c9018fb67b074671fcd3
-
SHA256
beb6b8e0e93f0ee2fdc7026a1d35b5a9ec529d879f4c3d05271736470834d730
-
SHA512
844d8e1c71d879ae044f6121efc85b229cd5d6d4c5cba2e5ec9cd61d1cc994b798542fc6d879e56038bf66cb2fcff18b7587302fe7be2521ee36b94dd511d414
-
SSDEEP
12288:hpr0l223coyGtT+ZX24cRvbnRq6eu4s2lcwW3RdkQSuEQkNRe7oGAVqBYl:/rA223HBSp24cZRq5He0DuRkNRcWqe
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e25f05ac6bf775e8f5f516f7b5daec5_JaffaCakes118
Files
-
5e25f05ac6bf775e8f5f516f7b5daec5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 632KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE