Behavioral task
behavioral1
Sample
87d41a584ba96be37143c639affd2b0b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
87d41a584ba96be37143c639affd2b0b_JaffaCakes118
-
Size
3.0MB
-
MD5
87d41a584ba96be37143c639affd2b0b
-
SHA1
56992b7b9269d13eb416baf7e05fda81fc8f3c98
-
SHA256
00474a8e2b9cfdc72e52ed0a807f1684250350fae3f131accf842df9a37e2ec0
-
SHA512
ed22c023d8d637ec55da20df3773a213742df70add187573943b5e16dfc7f68f09d5bf291a72b7c890d284011aa3eb13caf1020fb6a873feb20389ace0cfe350
-
SSDEEP
98304:fcQYODEUnRAgQVEAo9lgiv7W2xvWdCtgnzN1r:f9TDXRAg37/d7xWdCtk/r
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87d41a584ba96be37143c639affd2b0b_JaffaCakes118
Files
-
87d41a584ba96be37143c639affd2b0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 387KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 647KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE