Behavioral task
behavioral1
Sample
b589782559a76bcaf54515e56e6ce7f3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b589782559a76bcaf54515e56e6ce7f3_JaffaCakes118
-
Size
2.1MB
-
MD5
b589782559a76bcaf54515e56e6ce7f3
-
SHA1
9d3ba2c1fc4bbac9f10ac970b091e801bfaec741
-
SHA256
44c393ea107112edffed5fe9313c24a97fa0a89469695eda829158bba13c8e9f
-
SHA512
82c75702d29f62931c51db873028dafa8d51ace6d5a08bd0d95dd2d81db4ce666766f700c5e9fdc07f7b59a787dbd97c1083fcf8d6f600cc02531c7999720d89
-
SSDEEP
49152:SMTs/sLwsKbpkerf75VC9NBR4RJlL9vCg0wI8mRKO:RTs0ksKbu2ChRuHtCV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b589782559a76bcaf54515e56e6ce7f3_JaffaCakes118
Files
-
b589782559a76bcaf54515e56e6ce7f3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.0MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1016KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE