Behavioral task
behavioral1
Sample
b381be6a24e6e0fda147f050f2d40d73_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b381be6a24e6e0fda147f050f2d40d73_JaffaCakes118
-
Size
2.1MB
-
MD5
b381be6a24e6e0fda147f050f2d40d73
-
SHA1
808ffa4cdc851a14e7c0daace1ffb9568143e1b1
-
SHA256
17db6348eb25b94bd13d542851079c52f6a72f9d3fa2f935fa7c99f48551c25d
-
SHA512
6185f8712997f0617833a24115e789338b6d31f8552a9ea1f962624c12a05dee1706aec5356289bab982e918c9b4984c819effa0ec6b8dc2603fe9144a431050
-
SSDEEP
49152:RtHYSovpzoJwSVvnrBj58ZSG8m5fH1juKbSgJO7pP1zP:SpUWcDH8ZSe5H1juKegJO7pPNP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b381be6a24e6e0fda147f050f2d40d73_JaffaCakes118
Files
-
b381be6a24e6e0fda147f050f2d40d73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.0MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE