Behavioral task
behavioral1
Sample
da78e06aeb8fe41f36e54b83460cbbaa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
da78e06aeb8fe41f36e54b83460cbbaa_JaffaCakes118
-
Size
857KB
-
MD5
da78e06aeb8fe41f36e54b83460cbbaa
-
SHA1
a3281e923b3eccbd39843267b76ad92b2d6857d5
-
SHA256
1207b4a44d24570914b80986c3e8e1b4a0bac9d60889f9be046a2087e4e2c801
-
SHA512
5a5671eb921a5fd3ab2481a5a836490cb6b51a498901201c87e17e4fad5f0e9d2aee9586b186e8abdfda6699f8bfb9a21e9ad650f44ab9bd24d345d9821bbe1e
-
SSDEEP
24576:/SvjvqNSrSbov6eHbiXEBqTbH2yWkJHp5h/iExmkrTr:Kv2NSOQmXEBqeqp5h/iYd
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da78e06aeb8fe41f36e54b83460cbbaa_JaffaCakes118
Files
-
da78e06aeb8fe41f36e54b83460cbbaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 437KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 409KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE