Behavioral task
behavioral1
Sample
af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118
-
Size
987KB
-
MD5
af5d0181fbeb90324537ded8e893c4b9
-
SHA1
278a04591af1247e7619a37afc8c7ec7f5821866
-
SHA256
195fa3d7078b6a501af6ac1316dcffb4e02e58b864ff5b6f18ca5849dc586f2a
-
SHA512
83a6e0d0ade376d5fc6230bdd4e873a9a35c21570ac0a75e68896a421cbac17a4db4c44f0d9a2f17045fa1313551e88f3089abf9c09b9716afacb6694241cbcb
-
SSDEEP
24576:IeZaxci99NY+ueca57Y95pj11x8jSpQIeBho:l0xci9jrFp6j1wepZeBho
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118
Files
-
af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 299KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 603KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE