Behavioral task
behavioral1
Sample
f5b4b5de225913915e9901b49762901b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f5b4b5de225913915e9901b49762901b_JaffaCakes118
-
Size
705KB
-
MD5
f5b4b5de225913915e9901b49762901b
-
SHA1
0c6069291e6c4186d62e7ee89e0e8653fac2277f
-
SHA256
eda558ab06008f5e2696d04f0c625d22109bf9daa38493722695978cfbc5662f
-
SHA512
3ff1ca8e723fe6f0dcc7590ba583da66e88d97ab5cb1815855fdd9b2363dacf106ec3c1dd55c4b83c2fcc8b4a454c5b0faaa711102b7813e9fa3f5cfe8d31891
-
SSDEEP
12288:/z3haXbHrD9mAqQ7iD5WPTjQ4dOvqZXhKgm/bIr+nZi/:7RCbHHE7QeD5kTscOifKgm/smi/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b4b5de225913915e9901b49762901b_JaffaCakes118
Files
-
f5b4b5de225913915e9901b49762901b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 680KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE