Behavioral task
behavioral1
Sample
84d50f6b9a0565d510ac222245801c3f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
84d50f6b9a0565d510ac222245801c3f_JaffaCakes118
-
Size
673KB
-
MD5
84d50f6b9a0565d510ac222245801c3f
-
SHA1
85a0e6fe5be0463d344fc1e5b4bf3e4f0da8faec
-
SHA256
12656d01bc8eac47e46c3a2a4cba73d6c05c5e08bcb7b59c608cfb938b19231a
-
SHA512
5cd2f393c6d49afaf7057c677d4debd2ff75efb18b34faa42f91552aac3db4175f0ddb981ffe73d4603124f4a92ea975335b0497b2391f66d84e3801f56e8441
-
SSDEEP
12288:kc8pqa01tbBOJanSXPgxIpHohT/Z+xQ9pb0GDTXOTlPUSoSvTxUILLSHZIq:kBQBOJhPgUIhLZKQf0GnX4PHoSvR6HZP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84d50f6b9a0565d510ac222245801c3f_JaffaCakes118
Files
-
84d50f6b9a0565d510ac222245801c3f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 50KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 614KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE