Behavioral task
behavioral1
Sample
320f4d435976f4ef115a3128c314d5ee_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
320f4d435976f4ef115a3128c314d5ee_JaffaCakes118
-
Size
677KB
-
MD5
320f4d435976f4ef115a3128c314d5ee
-
SHA1
53ae0e78a1682cca168c67fcfe3fe3f134d5100d
-
SHA256
7ecc8a5fd058272a1fbda9c79df6d61e0ef7a31d31647f66ef8b8f2d1bb0a3cd
-
SHA512
c6f1e19847a4c60a49bbfbbe87b26d9192f2f256a57b58d70f5fef35aa7eaa197d48fbcc078d95ce58394c2a4c91e053db041c32ff78d3b1630c16ca99a35fa1
-
SSDEEP
12288:x0abxe02gpBI8J6o0B1VQkvLcrvmKy0ChZmDBs4VbrDk9YWCMZh1:+abAKbR0/CkLKyrh4s4xrDk9YKZP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 320f4d435976f4ef115a3128c314d5ee_JaffaCakes118
Files
-
320f4d435976f4ef115a3128c314d5ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 643KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE