Behavioral task
behavioral1
Sample
e7b4c9c9ccf5821dbf869aa9c9469ed4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e7b4c9c9ccf5821dbf869aa9c9469ed4_JaffaCakes118
-
Size
682KB
-
MD5
e7b4c9c9ccf5821dbf869aa9c9469ed4
-
SHA1
496e70ca73c73bb4147cad592f92a75ec9017b55
-
SHA256
08cd71eff401ae6e53204dfe651594ac2c25edb9222c4c8f5a20d03f2d6baec6
-
SHA512
c0959fbd7480e401456577ae2dc3554f34eeae5f4dc2b1aef8764941f0ddbbd5c5aca0982e1ffbb6b0b999ae4f24d9faa255eefc344a47542204b9455adbfd74
-
SSDEEP
12288:wqeoAl2fLZvjmgTfOZOLb4EHzHPebDE+Ip1MS9eKz5WtG:wca2fL5mcfOZOLODbIp1ME9wG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b4c9c9ccf5821dbf869aa9c9469ed4_JaffaCakes118
Files
-
e7b4c9c9ccf5821dbf869aa9c9469ed4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 550KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE