Behavioral task
behavioral1
Sample
a2d0a880dfb311c2dffea2f71debd270_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a2d0a880dfb311c2dffea2f71debd270_JaffaCakes118
-
Size
1.1MB
-
MD5
a2d0a880dfb311c2dffea2f71debd270
-
SHA1
171a20c879ddb55e316b1894f71a1f6058c522a9
-
SHA256
45f54e47fd6dd3b8f38219df63d51ab3e6ad7f42cd8f73b2fd8e74db2557eedc
-
SHA512
f333a4eb1b637eda8b242e81de60afecd86780a62e43e9c307955d0f1efbda71dfc5fc216e36991a11e4f9ef25d12e1cb85042a8fde00fafa31dd1b7496a57cf
-
SSDEEP
24576:JplZ3OtNM4MWykGEG/dOJryY4faTH5T2TvxjuIu:Jl+tNSdyrybiTZS5k
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2d0a880dfb311c2dffea2f71debd270_JaffaCakes118
Files
-
a2d0a880dfb311c2dffea2f71debd270_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 744KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE