Behavioral task
behavioral1
Sample
764bec644b8a4f87ef66cdc1f20cef99_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
764bec644b8a4f87ef66cdc1f20cef99_JaffaCakes118
-
Size
1.4MB
-
MD5
764bec644b8a4f87ef66cdc1f20cef99
-
SHA1
b06fab4afa5367865f5c7d2c393ea284077cb05f
-
SHA256
cacb0dc94b470f7bf07cb664f273b400c522631fdca57d2130bda4becef879ea
-
SHA512
d97e76021d20e6ae673071510df53429a37a096ba868ee5a17c1f8e79437b27858a88d5a9c3aa0dc5eec67493dbd72db6e202240779056f6b153a5b975f205bb
-
SSDEEP
24576:pFyo0zT9sj01Hi+8e0NTnGENjkTgnuX9JBPYy62yH7P9XvE2NZsx4SC+MUFXCI:6o0zHRW20uXvBAyC7PtEOeVM
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 764bec644b8a4f87ef66cdc1f20cef99_JaffaCakes118
Files
-
764bec644b8a4f87ef66cdc1f20cef99_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 637KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE