Behavioral task
behavioral1
Sample
d2f1f657716cc5ea246732926609bb83_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2f1f657716cc5ea246732926609bb83_JaffaCakes118
-
Size
4.5MB
-
MD5
d2f1f657716cc5ea246732926609bb83
-
SHA1
14dfefc7f8dcdc80bea624e9bd624e2e4fcc43d5
-
SHA256
aedddcb286ad73d9b3924e6b807c5c7091b7b93e4e0c293f7f0efaa3d549d7ef
-
SHA512
550ea53bf1e9dc02640432c5c985becb117a7ce28ffb7dbdbbc6473e34a516835a56851048e200dde9ba789fde11f560bfb2dd2ef5f01f4e15d407417307c6e0
-
SSDEEP
98304:o/QcSO2bVlubFU9fClchJOZfaTm42I0DmQDQ/VilpQuc:pjBlubC9fClcbOZIv2I0I/8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2f1f657716cc5ea246732926609bb83_JaffaCakes118
Files
-
d2f1f657716cc5ea246732926609bb83_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 435KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 15.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 606KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE