Behavioral task
behavioral1
Sample
e95c44d681dffa20e54ff4574bbe2635_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e95c44d681dffa20e54ff4574bbe2635_JaffaCakes118
-
Size
1.3MB
-
MD5
e95c44d681dffa20e54ff4574bbe2635
-
SHA1
b88621f8926789c7e8cf1731862e89b57a1b4e4b
-
SHA256
14dbc31e50e6fa5d1542bc46d033f27a3534c1872ae15629c4b893015e4ca1b2
-
SHA512
2d636e0d4677a4fa2bb67815da4c17e31c56f8c9bbca885350d3a1d8fdae72ee04345e30535e0ce3b5a0b32aa34510759edffbbd6329ddd3b9f4a14c91cfc9a6
-
SSDEEP
24576:O6YiVTgfQGmprZcgDvLwXE/RtLfK5p5neTr9TNmUEmCZCROlHZyJwubzU/4I30:BYiFgYtvs8y/2JxMCQhnufR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e95c44d681dffa20e54ff4574bbe2635_JaffaCakes118
Files
-
e95c44d681dffa20e54ff4574bbe2635_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE