Behavioral task
behavioral1
Sample
070afca5d2147833e87a85a72cc7f923_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
070afca5d2147833e87a85a72cc7f923_JaffaCakes118
-
Size
1.4MB
-
MD5
070afca5d2147833e87a85a72cc7f923
-
SHA1
e48b5be04f995c32559229f1ef16a7eda62432b6
-
SHA256
eb560e7c07ca34c6663a8d6f2999a943d94a2f54cdad47bd53681e525c44efea
-
SHA512
a2eb50c17219eebf738f183f18bc6701f52b6ad96277e2fa0a86a02d1c673829a9d7058879c4fc9ed84f2256faf37385ba5f9c232fed8fe82916a51edb71240e
-
SSDEEP
24576:gPkYU0eASjcCbkOjTZOAm8TpIHR7lhBNM5IF64YSwPpJTrmmK+LDdQqg/m/KS1Ke:gsYfeAGcCNjTZOO9M/vTQnSw3TJK+LpD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 070afca5d2147833e87a85a72cc7f923_JaffaCakes118
Files
-
070afca5d2147833e87a85a72cc7f923_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 310KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 726KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE