Behavioral task
behavioral1
Sample
c05b52c45d00d1dd4ed95d63e6d7e00a_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
c05b52c45d00d1dd4ed95d63e6d7e00a_JaffaCakes118
-
Size
984KB
-
MD5
c05b52c45d00d1dd4ed95d63e6d7e00a
-
SHA1
9f8c1841020dd8dc0bbdada5abcd0e63a48bd6a6
-
SHA256
318577dc506b6487383e884bc5abb10994986e70bed9901b080d8c5cc84e9554
-
SHA512
b0a5e71ed4d3c2ff94f62f21861d00c13189fb4961488c2484b61bf70a90d68323e2f7c4fc1cec36566c8206cc7c78ede2a99e11b68b98eb500197c7c31a5706
-
SSDEEP
12288:DuqbbYaPcWHDTUHz2E0eLX/xoAlyZmp/7b9d2+O1i9Encr3XbuywqueT3yxrcHcm:Dnnn4R0smAv32V1i9hHCywdeT3JHcv
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c05b52c45d00d1dd4ed95d63e6d7e00a_JaffaCakes118
Files
-
c05b52c45d00d1dd4ed95d63e6d7e00a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 335KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 630KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE