Behavioral task
behavioral1
Sample
c27e6b18b68cace9ede949f82f9cf089_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c27e6b18b68cace9ede949f82f9cf089_JaffaCakes118
-
Size
583KB
-
MD5
c27e6b18b68cace9ede949f82f9cf089
-
SHA1
244cc6af6d3baa8cac478999b94e656181cde106
-
SHA256
923acc07e13f582d600bdfa21d468c5ba5c7a1ff24686e115cf177024898c699
-
SHA512
2bc9260206998ecf089393d87268a0fd4cc120f6faa3f0c820cefae31beb3fd859907fea743ae79567d36b9bff74a7d79fd40779b1752854f13633505ef31165
-
SSDEEP
12288:Aj8fLDHNxvh/XuOly6VvRekNFOwnTHXpJ4crPUnYbfW6pTx1cZ:AjK/HNzvu4Vwk+qHZbbfvpTx1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c27e6b18b68cace9ede949f82f9cf089_JaffaCakes118
Files
-
c27e6b18b68cace9ede949f82f9cf089_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 573KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE