Behavioral task
behavioral1
Sample
2ed64c43d5dfa0f9146b8556400ad5b1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2ed64c43d5dfa0f9146b8556400ad5b1_JaffaCakes118
-
Size
970KB
-
MD5
2ed64c43d5dfa0f9146b8556400ad5b1
-
SHA1
81c853d7a4e36045aba40ef3b7e33670c3a187e1
-
SHA256
bcbf8903c1d8322a9a429400aee667cfc869d26a2d7d8fac992786258e33231c
-
SHA512
9cb8709ccb224c964c5f338a18d343a84738dfd41c293d35096b9e75ca23947a1ad5ab68e79aeef917006b2faede1486390d12705478a1a33d81db7f5f2b7157
-
SSDEEP
24576:SigYTMHC5j5tmPnhLXATqmlZS+u5kA5FMhNKLuL:RrjAXAlmkAEp
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed64c43d5dfa0f9146b8556400ad5b1_JaffaCakes118
Files
-
2ed64c43d5dfa0f9146b8556400ad5b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 228KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 724KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE