Behavioral task
behavioral1
Sample
18d7c1838b5190cf25187bca93851e62_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
18d7c1838b5190cf25187bca93851e62_JaffaCakes118
-
Size
321KB
-
MD5
18d7c1838b5190cf25187bca93851e62
-
SHA1
b407ff47ad4480b4f56ad1aed2922d390a8e70da
-
SHA256
97654d284a200fbc318831c5047893bd453e35d4219881df56ae2dd95ddab4ad
-
SHA512
5b14b8b91193c9004667eeda9485010b1f2a4eec3b88604e1fd149550f03972e841f032a2328d61e140d1ec044830a2b9b7a15193a8dc3c84e78f20b8d856348
-
SSDEEP
6144:DqFlsYIERPuXmB5irvulzcwYueOv2+b8mUiGUoMWVD2iw+h+:O/sYzPnB5izupct/mUiGUoZF2ch+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18d7c1838b5190cf25187bca93851e62_JaffaCakes118
Files
-
18d7c1838b5190cf25187bca93851e62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 315KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE