Behavioral task
behavioral1
Sample
6aff1e8be1acacf3da6e3edce0625d20_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6aff1e8be1acacf3da6e3edce0625d20_JaffaCakes118
-
Size
1.3MB
-
MD5
6aff1e8be1acacf3da6e3edce0625d20
-
SHA1
3ea39715f83037fd94cfccce5e0ab2203cb93168
-
SHA256
fe9c17ade7bac10842934c39406d4bdc85d72871f3662554e1163c84e467eb4b
-
SHA512
365d8423b0f4917c9390d056f470f3c8be635456e3bdacafe3062c2aa92ee3afbeb2849fbe1b3f0a8856f9476818e5270f53af0324e428b98a42c82de4803ea8
-
SSDEEP
24576:iNmX1xoh9AFIwPDYziTIAdQpqIk5qDKrb9s9AK3Exm4jnWUVT/PgHoXSknNxB:Kq1xoh4NPDYyI6Qpwgq9xK3q17VT/YH+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aff1e8be1acacf3da6e3edce0625d20_JaffaCakes118
Files
-
6aff1e8be1acacf3da6e3edce0625d20_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE