Behavioral task
behavioral1
Sample
a12148269a2cc7eb03d4de2e901c4b9c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
a12148269a2cc7eb03d4de2e901c4b9c_JaffaCakes118
-
Size
1.2MB
-
MD5
a12148269a2cc7eb03d4de2e901c4b9c
-
SHA1
1ce4a4ad7846fadb9c9abd9bcdd5224ded76ccb7
-
SHA256
c178f33856fb440ccb82c6b58ea853280f97bafe5b46275a68507c6c56048760
-
SHA512
96e52d4e4e2003e6d995fe23d52dc516c937ef006a3525380c693a59f3e3091302d8bcea7355a479d51bee612f7df6cda4bb430d2848dbeb637a9c6e449af0f0
-
SSDEEP
24576:W1ryjUhxDHxq6owfk8LIP4XvMlfegwxoC3rIRs/ikdhQ+k1:Ay0NTo0bsAXElfeRzr9RI+6
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a12148269a2cc7eb03d4de2e901c4b9c_JaffaCakes118
Files
-
a12148269a2cc7eb03d4de2e901c4b9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 925KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE