Behavioral task
behavioral1
Sample
785ea0570f2a12f14304923ec72cc66e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
785ea0570f2a12f14304923ec72cc66e_JaffaCakes118
-
Size
2.6MB
-
MD5
785ea0570f2a12f14304923ec72cc66e
-
SHA1
a98479c04442db889efd4bb5855605b156cc6338
-
SHA256
9c8e43242ae8a55ced87cb2e0e3ca6356697e42bcde3794731d558742bc42bf4
-
SHA512
e1c32c3a0f20798101d77b34d72425513e68f02a463863a28204ee848709473cab80fca39eb233519b3d116260ea3377c87e2984718b9684cd9b0b3b9ba53c21
-
SSDEEP
49152:Z9fgykpn7zks373IWVBVyhV+pXvdMnOxvJE+AD4AHx86HPgt:ffFYx373JA+pVrVJ65R1e
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 785ea0570f2a12f14304923ec72cc66e_JaffaCakes118
Files
-
785ea0570f2a12f14304923ec72cc66e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1008KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 622KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1001KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE