Behavioral task
behavioral1
Sample
f5eb49abc87c1cfa9bc40e0fc10470b5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f5eb49abc87c1cfa9bc40e0fc10470b5_JaffaCakes118
-
Size
498KB
-
MD5
f5eb49abc87c1cfa9bc40e0fc10470b5
-
SHA1
51f35cb2f545ee786f6f7ed038b0452f68b90b52
-
SHA256
0f884387f5b8329d270702c843f697ebd47eb345c7ed9b95ef8c84076d6b4b5e
-
SHA512
627a6f2e12ff090a4011f66f8e7703955e3086390f28cabe7e44aa4d3f6489623f4c32255fd4018e34a106cf050aafddfd0dae2167e86e1b42126d27b7a7fc20
-
SSDEEP
12288:hWHUiRP2u3Hir7LGCT5cPeeBpWyx9adJIzvj8KhS8xC3lUYSd:hWHUiRPdHA75T5GjpWNJIzvjLS8xylpo
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5eb49abc87c1cfa9bc40e0fc10470b5_JaffaCakes118
Files
-
f5eb49abc87c1cfa9bc40e0fc10470b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 125KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 369KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE