Behavioral task
behavioral1
Sample
23093532d0c4c43a4e107b8181d52eaf_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
23093532d0c4c43a4e107b8181d52eaf_JaffaCakes118
-
Size
1.1MB
-
MD5
23093532d0c4c43a4e107b8181d52eaf
-
SHA1
574f7d92e3ec38f7c9ad8efbd67c2533eb329ba5
-
SHA256
8a428aba0c9065159ee7041449e5dd22ef3379f0943dfa64b15e08c7e5c73721
-
SHA512
7fd937f654b33edf2d7f852a45663dbefb25d0c54082c8f58450d3ad3d4de6caf83aa38404c8a6fcf8a8d1df0e48511970857acf9156ee5f43675fe5dfca7f23
-
SSDEEP
24576:MxrMhYMc0FZn31LQDWE503ci6ER0WeoQiE/uC1ognoKerp2/:M1Mh1LQDXO3TeWvQELgoKe8/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23093532d0c4c43a4e107b8181d52eaf_JaffaCakes118
Files
-
23093532d0c4c43a4e107b8181d52eaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 684KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE