Behavioral task
behavioral1
Sample
12e577afbb8a98adc799a7ef4842b36f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
12e577afbb8a98adc799a7ef4842b36f_JaffaCakes118
-
Size
720KB
-
MD5
12e577afbb8a98adc799a7ef4842b36f
-
SHA1
0042bb83ee5897aaca1e7beded8737fb83ed73e0
-
SHA256
c531a46a2be997acdb3c7618c5279db456bcd627b67a9a18ff77fd150c08300f
-
SHA512
588201084284723729389300f0545481e770e18017a466fa6a8e747f018e8b952de4170c86785056ecbb5cf301eefa3cef5796912f18ec9d00b6b6391203bae4
-
SSDEEP
12288:Wi9iN1ywJB7Idh2KgFqBTjIz3fR8UTieYKIsXnhmpxvCqapYRHdVrU+P1Y:W5FJtIqqhkzvRZBYDsXhOxSOHg+2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e577afbb8a98adc799a7ef4842b36f_JaffaCakes118
Files
-
12e577afbb8a98adc799a7ef4842b36f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 596KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE