Behavioral task
behavioral1
Sample
ce4d771e4e2696363ebe74bb38dd9f3e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ce4d771e4e2696363ebe74bb38dd9f3e_JaffaCakes118
-
Size
623KB
-
MD5
ce4d771e4e2696363ebe74bb38dd9f3e
-
SHA1
1b361975e8b937e5db5f43f45a303ec7abfc1416
-
SHA256
b061a6fe003591b3f0656274e684bcf7990ac351bfc23f919097707b5f255a30
-
SHA512
180fe6195b5a0f686116e513232e87083061937cff359eee0b749b438de9f26d8a4977c122051dbcc09a1d072e27387047e3e0b3357cc61d3f5ab318aca6f12e
-
SSDEEP
6144:+UN5wMvnlTeA0iVF9P7zpvkxIcNp2YRH1wTjCUXzTVZ2CU8Mf+V3tz/H6C7LAm3J:vKKhYidCazxTHqq0iJuL3sJy36bDjhJp
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4d771e4e2696363ebe74bb38dd9f3e_JaffaCakes118
Files
-
ce4d771e4e2696363ebe74bb38dd9f3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 613KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE