Behavioral task
behavioral1
Sample
8c8b1b32c72f30fa9015dfa286c4b098_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8c8b1b32c72f30fa9015dfa286c4b098_JaffaCakes118
-
Size
2.1MB
-
MD5
8c8b1b32c72f30fa9015dfa286c4b098
-
SHA1
eef27137bfe454bc3d255db653eecab81f65c9a8
-
SHA256
4ccc47ef19eec14a56842c99d99c217c33fa4f77d7b8a71c5ffcf296f6530055
-
SHA512
c105d0353ee9e60c5c556d481c5b9e90927812494483a793783f98913ede3d55d788f4952700cfad7767907b78c722f69cf4ae89aae0bbbbb600eb0aa2b2ef24
-
SSDEEP
49152:zo3K0Z8XaQCA+NsnvXTDYxSAlhDNw3j1Iuw43Sfb:zLKQCyvXQxSYpNw3jB3SD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c8b1b32c72f30fa9015dfa286c4b098_JaffaCakes118
Files
-
8c8b1b32c72f30fa9015dfa286c4b098_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE