Behavioral task
behavioral1
Sample
ffd2b60afb1bca2bcb10f837c46f074d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ffd2b60afb1bca2bcb10f837c46f074d_JaffaCakes118
-
Size
818KB
-
MD5
ffd2b60afb1bca2bcb10f837c46f074d
-
SHA1
4af2f056647ad58f775ae5715e0e349c45ee0ce7
-
SHA256
a610aef74fae3f178f3c3752ba83a6e7b8ea82bab12d66471eb48240c02779c1
-
SHA512
d88932d047ee5dd4d8fcc01eba3562f944ecd27cfc951682d4cf1a3edf5d4c15e05d117036952564c669a72a8cae8d33f6b0d7adab5b23f0cda71d204b1d3bd8
-
SSDEEP
12288:cUDrWv1r25ge9RHRvcJvKe8uabWhM/QZLAgtvDLkegot1ysvRDvMc2qCGe6XsHAY:cUDS9q51RxyKe8uLdZsgtvkJ/KbMVAN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffd2b60afb1bca2bcb10f837c46f074d_JaffaCakes118
Files
-
ffd2b60afb1bca2bcb10f837c46f074d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 671KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE