Behavioral task
behavioral1
Sample
25c97af18550215eec252c4ca23c06d2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
25c97af18550215eec252c4ca23c06d2_JaffaCakes118
-
Size
1004KB
-
MD5
25c97af18550215eec252c4ca23c06d2
-
SHA1
4fde71d35628c8f97873aa77ac116785744ddee3
-
SHA256
df272c2f56e3d2766a903cd01feec62691b5fda1bc9d1f39889eb99417a0bcc6
-
SHA512
28072da8149440e110f7b642e1c3d5322a920b2c28ddc9fd5656052d4ec7fcacbe83873610dc832bc07acf2cfcca92bba3444af6d376279a83090ff39192703e
-
SSDEEP
24576:llExzAZoflJzycEH2RoukiHJ9LhcXuBhXoMQCScIQjn:pZ+QPtiPlcXuBhXmbzQr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c97af18550215eec252c4ca23c06d2_JaffaCakes118
Files
-
25c97af18550215eec252c4ca23c06d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 972KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE