Behavioral task
behavioral1
Sample
43b831a646d8eb9c65a19bba0b63190d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
43b831a646d8eb9c65a19bba0b63190d_JaffaCakes118
-
Size
903KB
-
MD5
43b831a646d8eb9c65a19bba0b63190d
-
SHA1
c07eebded9c8a9e7c1bc6a308e361715dacf2d6d
-
SHA256
486d8bf830adf4d330f6abf3d2b3cd8f7bc9e4a237250cb5188e602ac65263ff
-
SHA512
2cf8838f7ada16ffa3af24ed2c46ded2b87221040735e8630a4c965f80319d03f16290ef66b6cd2d3bb979a9d73e5f13fb8545310706d719f278ac583c3a2779
-
SSDEEP
24576:0ZPL0QSoKPz2+3twnoo6A8nMgqfLr/uEAbG:uIQSoKPFmT8yLz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b831a646d8eb9c65a19bba0b63190d_JaffaCakes118
Files
-
43b831a646d8eb9c65a19bba0b63190d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 288KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 574KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE