Behavioral task
behavioral1
Sample
5a40fb06c1845c15cf3e0352dd6a27fa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5a40fb06c1845c15cf3e0352dd6a27fa_JaffaCakes118
-
Size
1.3MB
-
MD5
5a40fb06c1845c15cf3e0352dd6a27fa
-
SHA1
cc8fae3773f52c04eb959e7846aa5a2495ea6fa4
-
SHA256
f242b6915365ee39a33e3cd7a2182c5d7e98ae5c55245cd8b8e7d598c1acc1f7
-
SHA512
113f315639825c433d91aaa3320ddc9769eacc4a756b303d840e704eda52573427ee82eab2fd2a215a50b5a968db204ca9f7ddaa41a62a9c20296b886145e59a
-
SSDEEP
24576:lUNobaSdxGL0wY79Am7j7u+A6zS/L5IwgH/VbAF4rXtFYX:UKSL0wYZAm7ibGRfdA2rXn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a40fb06c1845c15cf3e0352dd6a27fa_JaffaCakes118
Files
-
5a40fb06c1845c15cf3e0352dd6a27fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 532KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 772KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE