Behavioral task
behavioral1
Sample
2b149aa7ed83760c79d4e25ef95262a6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
2b149aa7ed83760c79d4e25ef95262a6_JaffaCakes118
-
Size
340KB
-
MD5
2b149aa7ed83760c79d4e25ef95262a6
-
SHA1
69351fb0cf6915dd66ac414d4157a8662339544d
-
SHA256
29c46a343bed69706d3a22854f00f65e97a5cc286d280627e02157c312c37af1
-
SHA512
c1fbe34a10a43dedaf9c33a3632d38e4b3c7e92bbef90810ad4e2c18ff295d0a7da0f82c8df278684b8c196c4b2f80472d53af2ce370e66ee7cdc953d15e917e
-
SSDEEP
6144:PJ96u+k96E96X96L96tfBmfk+eCk45WQA6EdE/l3If96u+slH+NTryn/CT:Ro50f0CksWWEu/lYfo5dT+m
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b149aa7ed83760c79d4e25ef95262a6_JaffaCakes118
Files
-
2b149aa7ed83760c79d4e25ef95262a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Themida Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE