Behavioral task
behavioral1
Sample
ae89db010fd533af75feb01103816a94_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ae89db010fd533af75feb01103816a94_JaffaCakes118
-
Size
761KB
-
MD5
ae89db010fd533af75feb01103816a94
-
SHA1
69368e2c360e6943d3973f567c6319f1becee693
-
SHA256
2a7efa570d21944aa645e95509be2c81af0a9259d14fa4c9fe6abeb5451e63e7
-
SHA512
6bdd9fb45fa93ce068c4c133e5522fb92496354b07cdb48ebd2f943a87613083aad24a81df3f054b7d1618a1b79c7095419367446c1385a2d664ab6341e5be04
-
SSDEEP
12288:LhTAyR9exvqSwmpxEQL+B9VXSZoReXwgElZi0WqgnnIT7ZP8in0+JNAnIhhvu7LX:LhT/j1mpxEvB+gVlLWq6IT7ZP8C2qhWf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae89db010fd533af75feb01103816a94_JaffaCakes118
Files
-
ae89db010fd533af75feb01103816a94_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 623KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE