Behavioral task
behavioral1
Sample
cff4b033c7d200e9d2eb96089d97bfe0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
cff4b033c7d200e9d2eb96089d97bfe0_JaffaCakes118
-
Size
1.3MB
-
MD5
cff4b033c7d200e9d2eb96089d97bfe0
-
SHA1
2782ef4965a34e283e9177b2fa6be2bf6c6c9b45
-
SHA256
4453b753dfd1127eca98cd784ace7bec5b47d82e7c6aa8f004c5384baf1106b5
-
SHA512
a0b862d99579c9b8aa1eb86052976bdcab55a9381d6f49b2404be3ac8048d79544cd3341bf9c1854ab946dee0ad54e43bf360f96b1cb2a323fd069a4c3b6998a
-
SSDEEP
24576:p7gkPqchgGePU+I1AIwoy8mNlkwqOcDrPPgtrC+iA0O8JWLZ5xz1QC:p7gkXmXPZnp7VfWOji/OJL7Z
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cff4b033c7d200e9d2eb96089d97bfe0_JaffaCakes118
Files
-
cff4b033c7d200e9d2eb96089d97bfe0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 574KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 602KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 707KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE