Behavioral task
behavioral1
Sample
1b6e9e2de82c71238f716597889355df_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1b6e9e2de82c71238f716597889355df_JaffaCakes118
-
Size
1.3MB
-
MD5
1b6e9e2de82c71238f716597889355df
-
SHA1
e083847506b506112f571e033fa721ddf1193b64
-
SHA256
9ba626718ff2be381d64c81ced50599061dc8957cc02537ff59f2b3f898a05fe
-
SHA512
212d2613d0b9826d97ae511743f2d0288ea1141194e2d955eb955968a2102c04c9b529b32ab41092b27e1e6cbf275631e39bdccbae955f25a42a4ee761025b88
-
SSDEEP
24576:ycPFgKBNcLzQ8+HoSTPCvFFpPK0jUAifu0glqWRve7q3pnpA8zLg7iZfB7p:ywBqwH5UXbvZ3ppA+ki/F
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b6e9e2de82c71238f716597889355df_JaffaCakes118
Files
-
1b6e9e2de82c71238f716597889355df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 326KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 899KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE