Behavioral task
behavioral1
Sample
a02ebab48d37f9e587f745ef5f4e7810_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a02ebab48d37f9e587f745ef5f4e7810_JaffaCakes118
-
Size
1.5MB
-
MD5
a02ebab48d37f9e587f745ef5f4e7810
-
SHA1
484d6208ab2e6e8cda184e87a0a68ec03f3a9f7c
-
SHA256
a3faea981a96fba15f44224d5de94ba7386b7fe245faa7dd8cdce61ac0b21a64
-
SHA512
23800806227130b9bd8fbdd4ea3ac328dabe21d8a17fd2ce9bc764061de35ac3d1c400763c62258e485d2adde7f88774ef6c8ff5553f6379b12e8cbe3c360767
-
SSDEEP
24576:fcrAU8cwRIkjgazmEH5oiCG5W2lnr7e1T12pPeHpshvdRzmm/Cii:f28cwRbjXWkW2lwT12tcpshvWYi
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a02ebab48d37f9e587f745ef5f4e7810_JaffaCakes118
Files
-
a02ebab48d37f9e587f745ef5f4e7810_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 159KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE