Behavioral task
behavioral1
Sample
cf11c5be0f500d60fb0bb9bd2fdb17a9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cf11c5be0f500d60fb0bb9bd2fdb17a9_JaffaCakes118
-
Size
2.0MB
-
MD5
cf11c5be0f500d60fb0bb9bd2fdb17a9
-
SHA1
2e639ac5f44eaf30e66b63e6c45b51a0e3daf9b4
-
SHA256
d39b793e27601e6f2e0e69a63806229dae7e0963da98bf196f017ab35bafdfdb
-
SHA512
0c8ee6f956512f00cf42d80e77a36cf1f4436651d15240aa392219fdfee14279d07d9a06288b5cbae63b62a6ab02c84c8ec54186b0fc5b48fb7464f165396d22
-
SSDEEP
49152:x1JnoDOVjnXeyYr8GAtk947JLBw4SgjK:NniOFuZrctnOW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf11c5be0f500d60fb0bb9bd2fdb17a9_JaffaCakes118
Files
-
cf11c5be0f500d60fb0bb9bd2fdb17a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 217KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE