Behavioral task
behavioral1
Sample
bab03e8a4617c86219fc5acfdef8a932_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bab03e8a4617c86219fc5acfdef8a932_JaffaCakes118
-
Size
2.7MB
-
MD5
bab03e8a4617c86219fc5acfdef8a932
-
SHA1
6e2aa9ae39fba9e1aed31121a0915529aeda6457
-
SHA256
11ea4ceda5c990c96e5f368cdfbce685dc848a3e066012aed0c5f46c0a98b86d
-
SHA512
f4155f99684c2ed0e0a758f264beb8881634e33c1f5e8e94f3879341a3036411a4693ca8ce83d65dfedcb53d67842c54f6c75696e6ba18ee28fc9ff16d0c55c3
-
SSDEEP
49152:7KSB15NeQVnjh4Xwdllz9+5xjGetj94MJ9mxP44L8aLfuLmkK4+mwqi:WG17eE+Xwnlz9+5ser48sP42/fuLmefi
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bab03e8a4617c86219fc5acfdef8a932_JaffaCakes118
Files
-
bab03e8a4617c86219fc5acfdef8a932_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 852KB - Virtual size: 850KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE