Behavioral task
behavioral1
Sample
bc7b53ca64f1b2a93f56147f9e31cb88_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bc7b53ca64f1b2a93f56147f9e31cb88_JaffaCakes118
-
Size
1.3MB
-
MD5
bc7b53ca64f1b2a93f56147f9e31cb88
-
SHA1
78def767d3897d46b0df66da5a953c9f3e3c3168
-
SHA256
595ffce811b36a5591b7054b16cddcd6fa205e4b19e0fa67c30ec8f5346c4f68
-
SHA512
4808b12d87d4506a9d35cf5a98c12ca964c0a0182415005ac4834e9dfdc1baa378670a5a75659d8cd01f45556799f847a8eeb55a6bc6e4ae3ec1ae0030e82a0e
-
SSDEEP
24576:7r9PB/kDa0h+rzNxyMwlu4wACdEzrXvvzA982baxhwRzt2gHTsN9CSQM:7vihiwMcXkSXXvv/9xhwrVHTmp5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc7b53ca64f1b2a93f56147f9e31cb88_JaffaCakes118
Files
-
bc7b53ca64f1b2a93f56147f9e31cb88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE