Behavioral task
behavioral1
Sample
d5140243e082b31ad806b0be52fb2b7a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d5140243e082b31ad806b0be52fb2b7a_JaffaCakes118
-
Size
642KB
-
MD5
d5140243e082b31ad806b0be52fb2b7a
-
SHA1
08ab9b147548865a47e04059aace864f2b230266
-
SHA256
dc7c0e665468e513177e835eb405401f98e41c14e7f7f80539ee2f604e257999
-
SHA512
2cccb6138dc0c9a91fd3ebd816f05199132efa7bc592d05d54766535b6f4c71559bb00d6e304e5cf0c2f9c9f7b1456e4553bd94bec663f2c092b6e77174aeae0
-
SSDEEP
12288:DeiAzFh/doeoWF4kIPM31hIGrJrU4bvnL+QmN+pmXBueaS3UXY3+7wnbH1+:D6XhIi1mGrJrUyvKDN+QKS3gj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5140243e082b31ad806b0be52fb2b7a_JaffaCakes118
Files
-
d5140243e082b31ad806b0be52fb2b7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 623KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE