Behavioral task
behavioral1
Sample
2888a2062c8bf83f6f1aec1dc03e7697_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2888a2062c8bf83f6f1aec1dc03e7697_JaffaCakes118
-
Size
817KB
-
MD5
2888a2062c8bf83f6f1aec1dc03e7697
-
SHA1
a938d797aeed41d98b6ef8513b6a40cd1919e029
-
SHA256
daef1c5b4a0ae81a14685367bbffaee33ef2c18551b191fe96aafa5e06828162
-
SHA512
1ba6617a717044ededb432199b461b34ded5759c995ecd6868518691d4499a6988052b2e0432976c9a9611ddbc677cf8fcfaa493d4a6185d875896d85e08fada
-
SSDEEP
24576:IWFtthpv3mXS969Ghx4Q0gtSzS3W/dtBQxn9LwZnxZj:rFPcwFSzSCdtWx9cpj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2888a2062c8bf83f6f1aec1dc03e7697_JaffaCakes118
Files
-
2888a2062c8bf83f6f1aec1dc03e7697_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 762KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE