Behavioral task
behavioral1
Sample
ae05836a51fb41ab1fa0f425b4763efe_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ae05836a51fb41ab1fa0f425b4763efe_JaffaCakes118
-
Size
742KB
-
MD5
ae05836a51fb41ab1fa0f425b4763efe
-
SHA1
d2573ba2eb0b9500a152f2ccf68fa18d4b44320b
-
SHA256
59b43b9ebd2874bf3612788ba66504aa215e3c2ae63f6dcc019dafc0a025f5b9
-
SHA512
974f3e619090dd610c4b2923668277d58aa1fb61322d6e3b784cf0e9b0485894cd2432e668f3c76f408820a86497d1a79688ce5b5a88466a67523873111e09d0
-
SSDEEP
12288:hAy/Pl9ff9cv4EvA6retahkeLG+juJnmkmKM85ZQZdg3scJlS0hYz0ybQMA7d:mqbf9c17vbtq9PmK1ZQEJFhK0ybQt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae05836a51fb41ab1fa0f425b4763efe_JaffaCakes118
Files
-
ae05836a51fb41ab1fa0f425b4763efe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 45KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 679KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE