Behavioral task
behavioral1
Sample
de33c32e49679dcbf7535f9d8f6438e5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
de33c32e49679dcbf7535f9d8f6438e5_JaffaCakes118
-
Size
1.9MB
-
MD5
de33c32e49679dcbf7535f9d8f6438e5
-
SHA1
279ccdda6e5070b763f13b5073b0b6d57e1f76a6
-
SHA256
9c1adee493f59df85a0292d7818bc350ebebb6239cc0f462041e30cd65262ae8
-
SHA512
016b37c9bd742dbe195b167bbffb4154507063b5b639e4639586f07d13b9672ae4788357aba42491efb8b1355c843f92d5225ed54660bec2689abc7d35323e66
-
SSDEEP
49152:DpJrno+zuW4JuRNqCgKd8c5x5Mj1lij4r3mYDm35WUah9OWigplV:LL34LN+SiPvpWd9tpl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de33c32e49679dcbf7535f9d8f6438e5_JaffaCakes118
Files
-
de33c32e49679dcbf7535f9d8f6438e5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 854KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 939KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 871KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE