Behavioral task
behavioral1
Sample
f78e390cd19cc90ba391b4645c76553e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f78e390cd19cc90ba391b4645c76553e_JaffaCakes118
-
Size
2.3MB
-
MD5
f78e390cd19cc90ba391b4645c76553e
-
SHA1
a8178d3f5e8243a8f06c6f1927ac3ab5ca98e61a
-
SHA256
953cd0c4a28691a670af65327e2f036e071e02e32e594aa093f3209d0728f776
-
SHA512
f798b31e43a4eed0ea7194d1a4f1f479a8e83dd6d682945c2467fb6b66f2d80156416be71252fe2d04135b0d31298bddd7c3fcf862bc9fcebeb6cd249d546d6b
-
SSDEEP
49152:RcHLH7/q0+ipQxvD3P8OmyAhha/nZ0FPJH/NZPy3AN3WRCe:+7/rvQJDP5IhOKH/+YmRN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f78e390cd19cc90ba391b4645c76553e_JaffaCakes118
Files
-
f78e390cd19cc90ba391b4645c76553e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE