Behavioral task
behavioral1
Sample
d1b777210be45bf59d0e7be7c5d43c8d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1b777210be45bf59d0e7be7c5d43c8d_JaffaCakes118
-
Size
12KB
-
MD5
d1b777210be45bf59d0e7be7c5d43c8d
-
SHA1
685b2a60b5aef8959c4fee077809fb2671a515c3
-
SHA256
3b10593cc5ac09d34d924daf0c9ecc75d3ecd3f39a7db8653f70d2b7e5b2ba7e
-
SHA512
25ab7f34abf3c322f8283a0833a777d7682c59cbbc15fe85ed9c384ffa3d541fb53848fe457590c5a60499bbab2bd3646b4aca0813aefdd42c6da72f055eeef2
-
SSDEEP
192:6WmPhy0PhIVnfgaY0l7xFaPIvozoV0DtvO9KPhXMHzbt70Pr19BW:TmPhy0PhIJfq0ZX0VVP6zbm0
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1b777210be45bf59d0e7be7c5d43c8d_JaffaCakes118
Files
-
d1b777210be45bf59d0e7be7c5d43c8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE