Behavioral task
behavioral1
Sample
d53ffd1fce97043454f3926eb7fa0618_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d53ffd1fce97043454f3926eb7fa0618_JaffaCakes118
-
Size
4.7MB
-
MD5
d53ffd1fce97043454f3926eb7fa0618
-
SHA1
5bdd5ff0071b867d26bb314e565cb6d4e5468a7e
-
SHA256
a587faa9be47724317847e4404a21a1af65fdb9c4c8de216ed7c33fc1aea4dff
-
SHA512
04e9ec5a6ef3314146297e51a3b93a3775fe875e3abc7a61f1b00359c613bb2c7a431fc410e5532583006a929d43c4a9a71ffe9b911f81f5c1321f486d33dac4
-
SSDEEP
98304:49YceCRZRcjVmkTt/P5JlBvZiH6aNei2WNB4ELoXY7y/C8q/b7nmEgHJXp:4aceOchvT9flBvZiH6aNHRuYoXY7Y1q2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d53ffd1fce97043454f3926eb7fa0618_JaffaCakes118
Files
-
d53ffd1fce97043454f3926eb7fa0618_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 45KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 583B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ