Behavioral task
behavioral1
Sample
5bf4dfb3d90511b3d4d2327ceee273e1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5bf4dfb3d90511b3d4d2327ceee273e1_JaffaCakes118
-
Size
1.4MB
-
MD5
5bf4dfb3d90511b3d4d2327ceee273e1
-
SHA1
14f401359f7009d31691c541fa50d67c25d8d1b0
-
SHA256
381655a4e927525a9ccc029caab0f489fdeed7cc7155d22716f753cb87281177
-
SHA512
26592d397a16b57669634ecbe1e6ce1167d552d0f5038f1cab58875b06b364114b3ba36791bad5e76a676347183b081a7a46752459bbac105791b0cd9c532e13
-
SSDEEP
24576:2Gt4QSkdTu3JaX4nVMuanj4Fj+eM1hMmhdgW9ELBMfZ38gSbzB:xGQSsT0q1j2+vRJ9UKB38b1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bf4dfb3d90511b3d4d2327ceee273e1_JaffaCakes118
Files
-
5bf4dfb3d90511b3d4d2327ceee273e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE