Behavioral task
behavioral1
Sample
1843ad65bbd94fc3eb2f1802156cdd7d_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1843ad65bbd94fc3eb2f1802156cdd7d_JaffaCakes118
-
Size
1.4MB
-
MD5
1843ad65bbd94fc3eb2f1802156cdd7d
-
SHA1
ba448da698d3f10259bc43dd52d2146e20ef62a7
-
SHA256
a18c37cfb85b45bb411a19ee6faeaa76796d9091ceeeba58931982123795fa64
-
SHA512
0f08c8b901bcce184886eb49328f2fc166a3ccb489540c8bbf53e0e038f2b18a5f96afe53445dbb358f3348ecf8ac56481412ac20576cedfad4e868f4e47510e
-
SSDEEP
24576:hXwOgqxiQ+mBAEMPBy2ssmLuH2abCChfwdWWys8yvGblnFiiJlmyNkpsjOPNo:+Yp+mBy5s3W2xxdWEzvG5Q3psj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1843ad65bbd94fc3eb2f1802156cdd7d_JaffaCakes118
Files
-
1843ad65bbd94fc3eb2f1802156cdd7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE