Behavioral task
behavioral1
Sample
f62f9ad8e32614be96b0e667c27b3391_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f62f9ad8e32614be96b0e667c27b3391_JaffaCakes118
-
Size
738KB
-
MD5
f62f9ad8e32614be96b0e667c27b3391
-
SHA1
b0e0f9243c3ab0aa26cfd36bf226f88c642a70b7
-
SHA256
fc0108c1fc2508557f5c04e16497fcfb79dcb6d2bc9b53c8c69c6ad3a6d6d2ed
-
SHA512
22d0d270d4802c6c9c227683e41428904d564c52362cd58499cb0a8c8ed5a25a51721fa31d148c53722ae0fd798977860c6dc20a2be8a597a8bed85c81d03759
-
SSDEEP
12288:5rXyeHHX+s9tDeNdQ/8Y89HUWf+vVxw0QK0dYCfANRhj970Sa34y2U/nz9BqF7z:5rNHHuCeA8Y89HUWWv3wV3d7Yt9vceM8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f62f9ad8e32614be96b0e667c27b3391_JaffaCakes118
Files
-
f62f9ad8e32614be96b0e667c27b3391_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 585KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE