Behavioral task
behavioral1
Sample
271e5a14336e5b2e44229d3b416d5dde_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
271e5a14336e5b2e44229d3b416d5dde_JaffaCakes118
-
Size
1.6MB
-
MD5
271e5a14336e5b2e44229d3b416d5dde
-
SHA1
a80ac7ee7d5844ec32e0b33c0e62b0b8968fd925
-
SHA256
d96ee285d89719ff74dd2d4a36906ea4ba225408d6eab513d57486cee8793336
-
SHA512
126432f592bf9e0572a3042d2eee1af098cec25a60ecfec2a47542f30dcb0b4b727aaaafc75a63f2effd9e5d4d7ff41e870cbb11d8cbcb00cc0fddb1f7c5563b
-
SSDEEP
49152:p7voPfkFQuNPb/XOxGMJnwJWo12dynLHQtIM:mWz6JwJWo1pLG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271e5a14336e5b2e44229d3b416d5dde_JaffaCakes118
Files
-
271e5a14336e5b2e44229d3b416d5dde_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 18KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 203KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE