Behavioral task
behavioral1
Sample
23938f3f3ef43ab802ef01a4dc6e402c_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
23938f3f3ef43ab802ef01a4dc6e402c_JaffaCakes118
-
Size
820KB
-
MD5
23938f3f3ef43ab802ef01a4dc6e402c
-
SHA1
4d05d819a296baa2ee9cb105710f0691b692b7d2
-
SHA256
55c4993f37fad00f62ccf30665447685f7a9a662a4e374d3b34c3e37ad8f000e
-
SHA512
219edd25c09bea6b6e3032b09411af12e1057012527e98b5d01e61b7eda652f7f6a0150f7c27805ff1b04911b175febde31aaf70504c5014ea566a3aa1f17480
-
SSDEEP
24576:9xiYf02BXJp5GBUJ3Q5lk3C5vIz5afh2b+8e:OYc4xHJQKOvItaf4b0
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23938f3f3ef43ab802ef01a4dc6e402c_JaffaCakes118
Files
-
23938f3f3ef43ab802ef01a4dc6e402c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 264KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 544KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE