Behavioral task
behavioral1
Sample
0c62c3a5d5fe47fc59a2b22f4baefe0e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0c62c3a5d5fe47fc59a2b22f4baefe0e_JaffaCakes118
-
Size
1.8MB
-
MD5
0c62c3a5d5fe47fc59a2b22f4baefe0e
-
SHA1
8584eb8dbefaab1750fe29c8d5274b2b92d9cd6e
-
SHA256
e918ec6e7e608259f8af3afdb81bd018d18ae5ff0992ee6492b5b901fa28a225
-
SHA512
33d947579b3352f2f71299180a90f3394e453009c8510b5d7605066f158ed6bf8c5ac3762ec26ff564618bac2d49825d692f0e530ecad623b421cb71f8331c0c
-
SSDEEP
24576:5D267J6HLUAIDiQt99T9RJqgrfs7R3WFeuGmiLvjC8JZ09lx0UxmxMPYbyEoLRft:5q/+Ft99pRJqYs71hKe+EZex0UxH/fJt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c62c3a5d5fe47fc59a2b22f4baefe0e_JaffaCakes118
Files
-
0c62c3a5d5fe47fc59a2b22f4baefe0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.7MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE