Behavioral task
behavioral1
Sample
ab5cd27398539b28a1e1cf3ef54edb31_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ab5cd27398539b28a1e1cf3ef54edb31_JaffaCakes118
-
Size
5.0MB
-
MD5
ab5cd27398539b28a1e1cf3ef54edb31
-
SHA1
15ebc19d49be4e756f7cc1e96b876459ff95de3c
-
SHA256
94766e2d76a4bafc0889e438aab0e05bdee2de1320905d53cd526ba678183a0d
-
SHA512
b345370de6b3ee2e095eeaa7f3fd628a9465bf32e519b1536b3c29ea9f3aa28ddb7b8d3b396e3afcf90a15ba069866e1c97ec2e065fe259527110134ff71025d
-
SSDEEP
98304:n+7YYGuC5Tp6/UqE9KWlCseQgnidWh1D1h3fxhZPsh:n4OJ5Tp6/S9Keh3gnU81phWh
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab5cd27398539b28a1e1cf3ef54edb31_JaffaCakes118
Files
-
ab5cd27398539b28a1e1cf3ef54edb31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 423KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.3MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE