Behavioral task
behavioral1
Sample
ffa543d0df106b41cb2f335ec57553ca_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ffa543d0df106b41cb2f335ec57553ca_JaffaCakes118
-
Size
4.0MB
-
MD5
ffa543d0df106b41cb2f335ec57553ca
-
SHA1
7020b50ca738afe2db75e24f5fee1fb325eb3386
-
SHA256
3c2105e67ea96f574886f1f833523f4bb2f0ee46b986fc4c4a681798fb6f49c4
-
SHA512
36da510bdcb3e13047d96cb1d0c1abbe9aebcd91f29f9ba62316dcbd92f7017f18733ca993a51071b23356f9b54377ded5f7d64e7563ee2f244ec97adb89363a
-
SSDEEP
98304:WFId0P4ofKsqvyEPqMYBvxXiYrzBtuyQhppHljJMEl2Pgdh:WudloJqakqMYBvxXrrzX1kppEEl2Pk
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffa543d0df106b41cb2f335ec57553ca_JaffaCakes118
Files
-
ffa543d0df106b41cb2f335ec57553ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 3KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 556KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE