Behavioral task
behavioral1
Sample
d03d04f0b36a0ec956f380cc02c675e2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d03d04f0b36a0ec956f380cc02c675e2_JaffaCakes118
-
Size
1.9MB
-
MD5
d03d04f0b36a0ec956f380cc02c675e2
-
SHA1
69eb6a7a6526a0a6a8d642f5059fcc4db1e9d112
-
SHA256
d3c2b069ac820761a9c47334c7e50d712a131e3fe1abcea9aca6a125b14bcb36
-
SHA512
b259caf7237a4b63a8e1d8caac69603041b1d6e0886424020d79d3a71558913049f41357a075080e0a589b41c132c722ab34ab841cf3fbb7ebf5ebac3f0a90c2
-
SSDEEP
49152:gVcfH2lCHGTgEQgdCcwjqwYU1spDJH+C:zWlUGkXwCc0qV8C
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d03d04f0b36a0ec956f380cc02c675e2_JaffaCakes118
Files
-
d03d04f0b36a0ec956f380cc02c675e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE