Behavioral task
behavioral1
Sample
831d31cbfc650e84dc032b7b4f18b22d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
831d31cbfc650e84dc032b7b4f18b22d_JaffaCakes118
-
Size
2.5MB
-
MD5
831d31cbfc650e84dc032b7b4f18b22d
-
SHA1
ee8573e7b8a3399d747d6571c581d561c69285da
-
SHA256
e88fe133c34b5188f222593dbdbf1cb2e0b401f10827e727d2adf6b5a19ef589
-
SHA512
8dd7e121982abb05ab996a838807d196962d1c97f2c4f4117af3da564cd7c9e43bed399f8de30afb4015ce8a78543b939a4e2eba117600a7da6506bc0f06c7c6
-
SSDEEP
49152:0PqkkWAG+Nk4igeMtPBaer+36VntnrIcoq/BgPAXQGP5yc0UHh43:0ikz+6ibtQj36RVJz5g2QWFh43
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 831d31cbfc650e84dc032b7b4f18b22d_JaffaCakes118
Files
-
831d31cbfc650e84dc032b7b4f18b22d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 601KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE