Behavioral task
behavioral1
Sample
2e36b174957a1219a49366a8622d3906_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2e36b174957a1219a49366a8622d3906_JaffaCakes118
-
Size
1.3MB
-
MD5
2e36b174957a1219a49366a8622d3906
-
SHA1
33d1f54270ab56c40cee986c35bb4328eba802c2
-
SHA256
a8a08de9d399ffcf32a82a3a367bc7968522c82ba73d4dad26e9b66ace80a6cd
-
SHA512
6abaf51d18abebec4a158bc10f4483bbdc922ba832d3bd5f9c3b6fed464fd1283a303a3c6ba69b78d96b760d11010b477031ec7baba79ee2a044c0399c0a92f8
-
SSDEEP
24576:b3QGunDnmmmxxFEdtfM5SRgzLwv7Y43r3pWxEopNyYnOWeRbK6X3FIiJOUO32+8v:b3GFiTyn2tsgUO32C2tYy0qH
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e36b174957a1219a49366a8622d3906_JaffaCakes118
Files
-
2e36b174957a1219a49366a8622d3906_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE