Behavioral task
behavioral1
Sample
b09299c2312fd1c41d3ec6f4d528a1ef_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b09299c2312fd1c41d3ec6f4d528a1ef_JaffaCakes118
-
Size
660KB
-
MD5
b09299c2312fd1c41d3ec6f4d528a1ef
-
SHA1
3a459a78d435d4bd4d56b233c5c6123b02368912
-
SHA256
9229071b54e6be6b50001cfd43a592ae26f0f6c93e8500139597fed64cba8139
-
SHA512
9ac6a8b3a18e7d50af96b20274845864444acf2fa6141268b62b9b08833dc44cc43f71b89a036e2c103a7672a903798ea6d3f851f733760dcf5f87c442acd38a
-
SSDEEP
12288:hu6n+qC3AivhQUs9X3loOQNbxI+RAkrKHSJ7eIthh1bslCks:cCdYDQUs9loe++AKyHjbsMks
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b09299c2312fd1c41d3ec6f4d528a1ef_JaffaCakes118
Files
-
b09299c2312fd1c41d3ec6f4d528a1ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 624KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE