Behavioral task
behavioral1
Sample
3416be98fc24105318b829ffd2475b06_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3416be98fc24105318b829ffd2475b06_JaffaCakes118
-
Size
1.0MB
-
MD5
3416be98fc24105318b829ffd2475b06
-
SHA1
eaf9795d556fc7ae9251e92c1c647dcfd8113691
-
SHA256
8a542e1a36fe53c39a3ea8e4fee04df003d4d1b2b3933fc3441872d80474415c
-
SHA512
2382fe13982dcb7d409bb77d2e92407579295fa48fa5d569d16cffe559e6c827fceb01d4432b7646f686e543615ef9678ad986211d86cbcdbe5512bccd255a84
-
SSDEEP
24576:c9i4gqq3fompnmpx2iHcz35/JjLnKH01LO0E4tO/R8VD7Ve:oibfLkd8nLKDp4tO/SZVe
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3416be98fc24105318b829ffd2475b06_JaffaCakes118
Files
-
3416be98fc24105318b829ffd2475b06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 751KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE