Behavioral task
behavioral1
Sample
3cd060d93f1dc95418404ec65d5a11a5_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3cd060d93f1dc95418404ec65d5a11a5_JaffaCakes118
-
Size
2.0MB
-
MD5
3cd060d93f1dc95418404ec65d5a11a5
-
SHA1
39d82f8f60b15be6bdde596dacfc81381e180df7
-
SHA256
c5bceb51cec3e02d78e279c32726680c07d2d9d47c22d04547b3e7d0d4967005
-
SHA512
d8fa6d85a194c51311fcdb7e38eabe83fc8f52d52af72a0b5760ec08253c358fb2d5cfe8b8e6e85af7a2b74f0e338dc71ac751b9126ffff691d98ab035cadcb4
-
SSDEEP
49152:30nbQ2suD1v9burRDj/180gbKNrJ5b5Mh3GP:EnmuD1v9ad/1809rJbMhU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cd060d93f1dc95418404ec65d5a11a5_JaffaCakes118
Files
-
3cd060d93f1dc95418404ec65d5a11a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 651KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE