Behavioral task
behavioral1
Sample
16571a51e6c6139d92be3f9b456718ff_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
16571a51e6c6139d92be3f9b456718ff_JaffaCakes118
-
Size
948KB
-
MD5
16571a51e6c6139d92be3f9b456718ff
-
SHA1
41f392ef017cc747093f361cf9970c8f65734c95
-
SHA256
d4efe808e6d4dfbbcb08e51c635060cc6d8665185094037786e8a540f687e7ab
-
SHA512
9b83b0da07756dd778ecd8a998c5d9a695d3255cf8ef716dd3a161dd80d9fc8b4917d20b0c82573c7a1440e90d475e205875b42151aacd234062da20aef4a15f
-
SSDEEP
24576:vsxmBbzyOJZgAMgSlXn12Nmpj5Qhn7W/2Bu0:kYNJ/MgsX8NQjGhn7W/WZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16571a51e6c6139d92be3f9b456718ff_JaffaCakes118
Files
-
16571a51e6c6139d92be3f9b456718ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 204KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 724KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE