Behavioral task
behavioral1
Sample
cfbeb5e9bacdd3b0b2ad96c06ad370fe_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfbeb5e9bacdd3b0b2ad96c06ad370fe_JaffaCakes118
-
Size
730KB
-
MD5
cfbeb5e9bacdd3b0b2ad96c06ad370fe
-
SHA1
77b1ec88a66e1afcc817da3068add94c7cbb9295
-
SHA256
0712766a392427537cfe5509337c801c6e2756d37e5678be44df145513ad7abc
-
SHA512
c4a3cd8b3cf705d87e3fccf9b7e8cea17d89b1211c4c46251a56fa998545d8f6808ed6712ac2b42d58564a0ae8f70dbaeee46ef004a43c77a803dcbeda24fa9e
-
SSDEEP
12288:+7iJSfXlEJqUBPL/2NLIHpkb4CRIDvi6nAA1mv1q13rFen3zETdF:+0SfVZU972N8HpZCRG5tmNq13rFe3YR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfbeb5e9bacdd3b0b2ad96c06ad370fe_JaffaCakes118
Files
-
cfbeb5e9bacdd3b0b2ad96c06ad370fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 100KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 624KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE