Behavioral task
behavioral1
Sample
04b18c92cf4426c1ae366cfc5c843fe0_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
04b18c92cf4426c1ae366cfc5c843fe0_JaffaCakes118
-
Size
1.4MB
-
MD5
04b18c92cf4426c1ae366cfc5c843fe0
-
SHA1
b702ec99abe5a4b2d1982176f8443cbe28f68e35
-
SHA256
d247f4f46e2ccfffd5474d2cbd0e5ad70118319075e19c2346f2342a0b0a8ea5
-
SHA512
355ad192859b68f5ffb5f96eecc6ca329847ce29cff255cd89aad0700ad539d20b697e5d1ee9f10ad02b3a9a0432cfbc2f187242f4c852aa6d3c9be6cd9b7d7e
-
SSDEEP
24576:Jc1lG0vI4lzVdOZYBgxQ7agL/PFI/pAzo6qohzN1fwPQfMdY0cSyukSsF8p6pI2I:yIGz/1jC/p6z6gcF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b18c92cf4426c1ae366cfc5c843fe0_JaffaCakes118
Files
-
04b18c92cf4426c1ae366cfc5c843fe0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 776KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE