Behavioral task
behavioral1
Sample
f569dfa0c90c3cd4bf5beba70ff0b651_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f569dfa0c90c3cd4bf5beba70ff0b651_JaffaCakes118
-
Size
939KB
-
MD5
f569dfa0c90c3cd4bf5beba70ff0b651
-
SHA1
c62f2809e3cde2dd4e0c4bfa2524b16743acc94c
-
SHA256
4306e80b990fff6bf0982d57537a9a13ae27f9bf012f09a2eaa79313160c4a74
-
SHA512
b86bd12749be1c2f632f2b3e115b886e278c9dbfdba0020d87ba86b36f271cd9b7bddceb141ebed6da419f36075a371f4b2e5dd157828ee787757aa4272b98a2
-
SSDEEP
12288:DQpr0l2zy3Lgo7qvJM6RbcLraiJqYFbr//97b3q2j3te9oJE8q12xfMqSxpq:DsrA2eHqvW6R4HBFr3FaG3t3M1Ef
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f569dfa0c90c3cd4bf5beba70ff0b651_JaffaCakes118
Files
-
f569dfa0c90c3cd4bf5beba70ff0b651_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 813KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE