Behavioral task
behavioral1
Sample
1ac2103e546fc733b1279f2019392366_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
1ac2103e546fc733b1279f2019392366_JaffaCakes118
-
Size
1.4MB
-
MD5
1ac2103e546fc733b1279f2019392366
-
SHA1
973e92648372364316f860026ac759505c4ec640
-
SHA256
a526ceff827548b40775bfd3ba8712f6a0ec9c6b17b0a115d570c430382a1511
-
SHA512
b47ff669f3592dce5501596ad4ea37a57aab5c118d635ea462684d29faa0995124dbf4ade51952da223cec8a3a957a5d7f3a2fba9004cbb06613a30530c3db0e
-
SSDEEP
24576:jJNW5bRg3Zur9Q9+y0x2rw9W0ZjXuCkhW0k07lx73rf4G5c+M0UTgb:tc5NCDS0wf9X3Ol7lx77Z5c
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac2103e546fc733b1279f2019392366_JaffaCakes118
Files
-
1ac2103e546fc733b1279f2019392366_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE