Behavioral task
behavioral1
Sample
e7f86cdb699f35033fc6ffc168ecbb1f_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e7f86cdb699f35033fc6ffc168ecbb1f_JaffaCakes118
-
Size
419KB
-
MD5
e7f86cdb699f35033fc6ffc168ecbb1f
-
SHA1
292a483244ad4a61e077102a18cd8b74012bc256
-
SHA256
c6ad177dea961135aba9f12bde612a14de20e814169e013a61c716e61283e6ad
-
SHA512
84524b2bc8f40c0e45eb872fafac0a8d28fc5d9da5234dcb8652d5ce3e75e8ae6677983f770e2bef6a2b807cbbe79fdaa5ead05055e093427f9aab250011a606
-
SSDEEP
12288:XpaCutcWeDRpdAGUfJfhcv4ClqAAprC093/Xn0y:XICecdtpdcJ+v4ClDC3/Xnx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7f86cdb699f35033fc6ffc168ecbb1f_JaffaCakes118
Files
-
e7f86cdb699f35033fc6ffc168ecbb1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 365KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE