Behavioral task
behavioral1
Sample
2658d502a24d11220e0b4279b8aafb86_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2658d502a24d11220e0b4279b8aafb86_JaffaCakes118
-
Size
1.8MB
-
MD5
2658d502a24d11220e0b4279b8aafb86
-
SHA1
4ae0fd82a41c216f4cb7da588f459fc94a73b12b
-
SHA256
7d573ccb98a5ca76bbe7f0713a419f28f948274c78b47e1513916069ae291c25
-
SHA512
29435d9b30e1ce207441676b443010016139c0c7341937ef9be0f91924116f61ac9968f0333ea8d472193148846f69cfb7ac020de22767351f8a2f3a7c66dfbe
-
SSDEEP
49152:CqnoXkp4H6uxBz8qLM5rcCculKVODe6coDM8:CmoXkp4H3xaSCcCKw1I8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2658d502a24d11220e0b4279b8aafb86_JaffaCakes118
Files
-
2658d502a24d11220e0b4279b8aafb86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 401KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE