Behavioral task
behavioral1
Sample
b1ee616a2d0a1c43c4a16914589b7c5a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b1ee616a2d0a1c43c4a16914589b7c5a_JaffaCakes118
-
Size
2.0MB
-
MD5
b1ee616a2d0a1c43c4a16914589b7c5a
-
SHA1
f04932ea4167856bf70615ba524327b41b3e05e0
-
SHA256
c262700346f420bf7ae3275e2e81520781435fa7129fc2217cf666b604ffc21a
-
SHA512
0c4b684054ea374bd1a8024c2d07fc8e4c1c7ef6e6877f87426d35120b6890dd3d6c27deb40ad91bc0528a67b8c236f777b99523d0bb308bd7d9389934ecc916
-
SSDEEP
49152:glXTaPLrviMAt8AVVNJokRdO1Yfl5Uv9Xse+GMv3TV:4TILS7V/BXjlSvZ2dJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1ee616a2d0a1c43c4a16914589b7c5a_JaffaCakes118
Files
-
b1ee616a2d0a1c43c4a16914589b7c5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.0MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE