Behavioral task
behavioral1
Sample
c85ff0fd04a1917feecb7d6eb6c5aaee_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c85ff0fd04a1917feecb7d6eb6c5aaee_JaffaCakes118
-
Size
805KB
-
MD5
c85ff0fd04a1917feecb7d6eb6c5aaee
-
SHA1
257daacc7f4045136ac06e81f0e82a3111867d11
-
SHA256
0924698ea68e21b035d6c41ffca276a75eacac9866b4aa82609c9d0a804169e9
-
SHA512
02ca49aa3e06d8b1e57924ba51b348ab8b8d387ea3b357f52d00d0daec6dc679a4855273bc9376dcefc0a8f6f2efe30c6c16567dceccf47ad4aa27d5b4054868
-
SSDEEP
24576:6jjEqJLyKYewO/cpvi+QnAjREss5JQFwLAZd+CtK9nE:6j/SMKK5nAFshL8d+CAS
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c85ff0fd04a1917feecb7d6eb6c5aaee_JaffaCakes118
Files
-
c85ff0fd04a1917feecb7d6eb6c5aaee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 746KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE