Behavioral task
behavioral1
Sample
a8eb56f156cdfbeb7613f02b9c27ebe7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a8eb56f156cdfbeb7613f02b9c27ebe7_JaffaCakes118
-
Size
988KB
-
MD5
a8eb56f156cdfbeb7613f02b9c27ebe7
-
SHA1
cbceb309ca97963c93689d8c4a785dbcee844f7f
-
SHA256
a2c152df9a322f416b7b15346ef1971819cdff032d0e8c9ac122fb447232c2c4
-
SHA512
9db502788bd582e9711c23dee85919101203c8aa0d03d814a3a1be295f07e6c2be7208850a103bb3d333cbe0458fc127160e4d25774a7bdc5a8a292d160bf3da
-
SSDEEP
24576:0nffHPSlCmb5jXIMyU+SHxu5F6OdF5JtwcQ:OUVOUn6PdPJtw5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8eb56f156cdfbeb7613f02b9c27ebe7_JaffaCakes118
Files
-
a8eb56f156cdfbeb7613f02b9c27ebe7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 648KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE