Behavioral task
behavioral1
Sample
a05f45eec15a78749993b89cd5132ab2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a05f45eec15a78749993b89cd5132ab2_JaffaCakes118
-
Size
1.6MB
-
MD5
a05f45eec15a78749993b89cd5132ab2
-
SHA1
6735b38b0a36b49acd5501ebb20c899262a2ab47
-
SHA256
4b55d0d6c605eb9e32c5c4dc1d3c113fcb0b3bc8b97ada0296b4280d6d33fbd6
-
SHA512
813646baaa1d99b894bbd5238cf1bd6bfa0f6d4171dc016bc4883d94613cbf4f559471980954d91062741720078cc7da5ed1d697fac4ac1e65c7e82c276bf2a9
-
SSDEEP
24576:fITU+IZo0DP2guiLC6iZpqAjVprAtg6u1U4PnIyeuKb8eOTft0lU:oUfZz72ULC/p9sGNU4PnIyeuveMVn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a05f45eec15a78749993b89cd5132ab2_JaffaCakes118
Files
-
a05f45eec15a78749993b89cd5132ab2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 676KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE