Behavioral task
behavioral1
Sample
28550c5080df7872414a73e53ee2aaab_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
28550c5080df7872414a73e53ee2aaab_JaffaCakes118
-
Size
844KB
-
MD5
28550c5080df7872414a73e53ee2aaab
-
SHA1
defb791a209f9900396c4f11a5d4b4074cba8d07
-
SHA256
b391e9d65b9ea4de7ff3388e8abf05edf5b2f82ca7bbf232b9d5023508f642c6
-
SHA512
57a80ab4e0193dd3ec3b46cf218d8f53afd4b9d2f40235cef38a3eccff96a293f11b127606d06fda21e86597e42cefe66779b5a48f545d88a9d88b3c0a2c797f
-
SSDEEP
24576:ue2wKZas2ctMIaHni3ENvRYTszAL5KzSb5aQILX:4wbA2niwR3YKzSk
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28550c5080df7872414a73e53ee2aaab_JaffaCakes118
Files
-
28550c5080df7872414a73e53ee2aaab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 219KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 611KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE