Behavioral task
behavioral1
Sample
333a4e1854d6d0086e7578132b2c9e38_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
333a4e1854d6d0086e7578132b2c9e38_JaffaCakes118
-
Size
5.8MB
-
MD5
333a4e1854d6d0086e7578132b2c9e38
-
SHA1
31806aa59ebf6ca5ac7f6ec237ce5bf99c662ebb
-
SHA256
585a41687c8da2b402e0dd27518465743e29f6e1373ed5c2042e2acdc1428767
-
SHA512
1f58b66027503620cb361175bcace7dcaf12d97c1ddd11dea8e72641e7da08ae9a6ce0bedb5ff063d3593fa76bb8e45f8b47800295fb6e5997ee655ed09bc149
-
SSDEEP
98304:lRhUkfQymBogLLGWk9n0auAmksmeer9zz7prkoLfaraF0JEP2TG7Mm+:lRhTYBnzS0auNkJtr9zzuZrTEP2TGYf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 333a4e1854d6d0086e7578132b2c9e38_JaffaCakes118
Files
-
333a4e1854d6d0086e7578132b2c9e38_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2.9MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE