Behavioral task
behavioral1
Sample
5cbd2d2280504de253ab4557da32c3fb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5cbd2d2280504de253ab4557da32c3fb_JaffaCakes118
-
Size
1015KB
-
MD5
5cbd2d2280504de253ab4557da32c3fb
-
SHA1
64db4970ecb5be13284fc2f267be5cf1eee70c09
-
SHA256
ec86b3b4f0c7285ba1e4bd1b73b8ac0858be20e4ce15e4e201d11666057364b3
-
SHA512
9b859e00a914b7971e69f7cc93e68cdb697a4184287dc3a07a827a3fb84031857d1838ea5a4f4c7d7637cd9fa6450ce8c1e43aa464f9b4ff8600ad29cea1e993
-
SSDEEP
24576:ZCyjG+nJMkR33+XzNS5yKgNcuWoJTtL+dKkYLqhsUQJVN:kJkdujRNcuXJR+dKkCoWz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cbd2d2280504de253ab4557da32c3fb_JaffaCakes118
Files
-
5cbd2d2280504de253ab4557da32c3fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 314KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 679KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE