Behavioral task
behavioral1
Sample
326886c2f3fdac5e4a2a9c976bc9bc15_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
326886c2f3fdac5e4a2a9c976bc9bc15_JaffaCakes118
-
Size
1.0MB
-
MD5
326886c2f3fdac5e4a2a9c976bc9bc15
-
SHA1
12e4d141c4719b3cb56a27354e9fb0e37b17e8e6
-
SHA256
94d664f95794f130c2c3dc9ecd2c32d7cd7df961fbcb8d32589fb67216acad33
-
SHA512
8d458b1891a5179f1461383b7c71e8fb7d29614316108196d5f67f75f6ca861f99888308e9e89001279e49dd3f14d835037c9d0b9cb9a99338ffcb78f7dfef0e
-
SSDEEP
24576:q2dJY3UfWWLr25lFUgevDrYQsdb49sKK8ZITu2Fq2sj7AUJrBkYjH:VU3UvmK1bsdUhV+Tu1r5/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 326886c2f3fdac5e4a2a9c976bc9bc15_JaffaCakes118
Files
-
326886c2f3fdac5e4a2a9c976bc9bc15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 394KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 640KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE