Behavioral task
behavioral1
Sample
a88b767180efa28a9db42dc891234f2e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a88b767180efa28a9db42dc891234f2e_JaffaCakes118
-
Size
1.8MB
-
MD5
a88b767180efa28a9db42dc891234f2e
-
SHA1
cb9e713d39f2c57bb4a32958da3713775ac46ad2
-
SHA256
ab796713b83059fe8470fa4584167b6175d6771d654a4f4d5d1b4fdd14af7787
-
SHA512
49c42ed17b7a123bbcda32c6698c53824f16fc0055111af9623caed4eb2c8060d47f76cfd2d0a29295f70a1d1720713c45f251c69846e188f1f2cdfde4c05d7a
-
SSDEEP
49152:KodFbGLNy3bX/XTZEv2QiAu2jgTWEnjm1Fl:TrbGLNyLvXTZE+3mgqEnK1Fl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a88b767180efa28a9db42dc891234f2e_JaffaCakes118
Files
-
a88b767180efa28a9db42dc891234f2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 326KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 829KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 733KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE