Behavioral task
behavioral1
Sample
6afe4d12c01acd0805bf8f3cbbf0e311_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6afe4d12c01acd0805bf8f3cbbf0e311_JaffaCakes118
-
Size
2.2MB
-
MD5
6afe4d12c01acd0805bf8f3cbbf0e311
-
SHA1
791633671eb024bc3e89be8bf0b7a87b73c31065
-
SHA256
fff70f85ae4dbfadca602c8f222d286696382a222839323f1222b16d2be3e82f
-
SHA512
6cacfafdcf40dbb49a5fabd55fd1df62afc254420649b5ef7b0a185f79ea81b847f4f4170e060b03e03e0934108c80c9754033b5660dca717a46b779485d1ed1
-
SSDEEP
49152:2nhInO0AkanJ2LOJQY1MBu7AxjvbtcR2kxDqxz:ChgO0AkaJ2LBXnag+E
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6afe4d12c01acd0805bf8f3cbbf0e311_JaffaCakes118
Files
-
6afe4d12c01acd0805bf8f3cbbf0e311_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE