Behavioral task
behavioral1
Sample
cfa12f3bdf99f2a99c4fd11c1fb2db7f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfa12f3bdf99f2a99c4fd11c1fb2db7f_JaffaCakes118
-
Size
1012KB
-
MD5
cfa12f3bdf99f2a99c4fd11c1fb2db7f
-
SHA1
ee499c9ab7ae6ec9d69865f4ff7cb7444e23483a
-
SHA256
dda6309ce52ea80a5586958a69f816d6638bde69bf60f55aa80e6f9e8395ef50
-
SHA512
481b8ea7c1dbb4ab08266f9274d8a9f087ed1b4b8f49d8dc8e5033c1e2e2c9713f595fc12c26f1a66c6005e8bb122fe873bccf9fc2acc975feaa4a2581e7e1f4
-
SSDEEP
12288:x7Lz/fp5TKqzL0B0UIHKq7GKegziPTCZNwsf2t8CPkGeUO027tpDDYAKVMgvu378:x7/XtUQ7sqWOmsUnPOl0Ao+76yzNwqr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfa12f3bdf99f2a99c4fd11c1fb2db7f_JaffaCakes118
Files
-
cfa12f3bdf99f2a99c4fd11c1fb2db7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 303KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 687KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE