Behavioral task
behavioral1
Sample
5a76ea3af08ef167e22926428d5ce6c5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5a76ea3af08ef167e22926428d5ce6c5_JaffaCakes118
-
Size
659KB
-
MD5
5a76ea3af08ef167e22926428d5ce6c5
-
SHA1
770524849779f470ce0e7e2477c1d1070e94112b
-
SHA256
d7e2a13b8891d2d5639d43e64f8c33168d745996ca08ce02ccf721d71031811a
-
SHA512
2bc9938af2cfababac17806f92b4ac18fee6325f65c992b98782b9a1ef32615a0a25c0eb59dbb6de30e817b5c25a020489503baf7b986a1aa1880efafccd1d33
-
SSDEEP
12288:Z+spHZ7vnvXB9TfTvrKR+/uZEttLYuggb4eJWcH5OZ6FBwMQRzlRzM3Fb3TO:Z+sDjv7vftUK4eJdMF7deZjO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a76ea3af08ef167e22926428d5ce6c5_JaffaCakes118
Files
-
5a76ea3af08ef167e22926428d5ce6c5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 617KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE