Behavioral task
behavioral1
Sample
bcbd7690566354e6f6c01ef3ecf2cf2d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bcbd7690566354e6f6c01ef3ecf2cf2d_JaffaCakes118
-
Size
1.5MB
-
MD5
bcbd7690566354e6f6c01ef3ecf2cf2d
-
SHA1
8d53e01bc823659fb7a9f81ee8421a4ba28575e7
-
SHA256
932469ac7a1435006aab53550357734cc6aa8616d47164aea8e4bba0cd512c33
-
SHA512
97682a2ef6159b3b448254559fd0f54400f9833dd1a62f4b66946c5416515717efccfc7cef71caf9626b3ed84d0857ee636f576005e87351d8489a10f29920fd
-
SSDEEP
24576:1DuOH+rP+kby01CGQiwy0JAZTUdM9SOxqzgIE1mht4WJFHoplmFc8TUeFdOxVSIn:1yr2kbiGQFA6dQQ7Nht4AFHoecqndIn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcbd7690566354e6f6c01ef3ecf2cf2d_JaffaCakes118
Files
-
bcbd7690566354e6f6c01ef3ecf2cf2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 128KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 531B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pseudo Size: 27B - Virtual size: 27B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE