Behavioral task
behavioral1
Sample
ac275645a2c4c7ac552402c9c4f7e29d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ac275645a2c4c7ac552402c9c4f7e29d_JaffaCakes118
-
Size
1.4MB
-
MD5
ac275645a2c4c7ac552402c9c4f7e29d
-
SHA1
45ca50e1ddb8e52c557edba4859d84d5ed95ad7f
-
SHA256
abe0c247b68979feec35bcbb7175242e3ab6e18bf3efcfba42381010883cafc6
-
SHA512
e4610bd68d53d50eaca06e0eb10dec0a393cb7a12187b521faa66388db13c0be62ff5f90e2623bb84b4e3ac14333a919a2111d8f7de6dc2700e7d338c19eb70d
-
SSDEEP
24576:xSXEv1fKY7zCb96UHpJnjnzb6pEc6Kfd5ikm/K7zaDg3MKeazK1+n0zetBaZNwZ2:xSySY7e57jzb6JfzikmQyg3E1hzetonF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac275645a2c4c7ac552402c9c4f7e29d_JaffaCakes118
Files
-
ac275645a2c4c7ac552402c9c4f7e29d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 663KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE