Behavioral task
behavioral1
Sample
b107352be4f416001ec9a38de5a6707a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b107352be4f416001ec9a38de5a6707a_JaffaCakes118
-
Size
2.3MB
-
MD5
b107352be4f416001ec9a38de5a6707a
-
SHA1
824657b54b36d2f82133726e83eeeeccb22b0954
-
SHA256
c2c68d9096be9b5a086af7daf7ffab8addc2f79fd09ed5c444ea071ccfb08b52
-
SHA512
28d55949445e3ff5b51dac6c6dfdac4aa1e2aee8f65420cc0510f9cb9c446c6f3ba9718cfb37b055febaefe3ee622153def919b7387683b3491a33ebf824fdb6
-
SSDEEP
49152:c9EA2uTb5zUg//NnbNlmXvNYVKna/fRxFSqQ5moJcWwaSu54f:xkTbdR/LMvNeKaETQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b107352be4f416001ec9a38de5a6707a_JaffaCakes118
Files
-
b107352be4f416001ec9a38de5a6707a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE