Behavioral task
behavioral1
Sample
d646a4ad7796c9552266f985119e8e86_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
d646a4ad7796c9552266f985119e8e86_JaffaCakes118
-
Size
2.6MB
-
MD5
d646a4ad7796c9552266f985119e8e86
-
SHA1
8ecf0e9f9b58b51619d797a337226adb5f9e3e2a
-
SHA256
f14048acf21fa22bab2972bbd7ddd187f43853795088b41f8ca126d52f2b9ff1
-
SHA512
5249447eafa88858ef743619b10a383247f1d0b8947c3ac55d14850c02374c92aa138c80a87856574ccabccf1aa94ef3566f5f33315e8f8a229aad628780e175
-
SSDEEP
49152:QyIjegleg3dc/UHHU54llsRGmubN7/qxk7Tp2m1EatoGSERbYSJ6VG+Rx26k:QRDcAGuHX3sX0ND7XEcXmDVGt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d646a4ad7796c9552266f985119e8e86_JaffaCakes118
Files
-
d646a4ad7796c9552266f985119e8e86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 87KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 51KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Intel Co Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Intel Co Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Intel Co Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ