Behavioral task
behavioral1
Sample
346158174ca4079e3fbba97f57ea2ac9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
346158174ca4079e3fbba97f57ea2ac9_JaffaCakes118
-
Size
1.5MB
-
MD5
346158174ca4079e3fbba97f57ea2ac9
-
SHA1
223a848872ee1c8d3b6fb8ceb76e664dcbe33ace
-
SHA256
1ee937e2e040fcb3ab795bfbd6d03886049e566b1a6c7f2aaa65063e26e5bec8
-
SHA512
4d201d09e3537dee9039edced653cf6c60cc886e35669c58bf092ac34e99813b455ee83b07b7dac240af4223ec010941afa4092602819cf603f4c831927eb326
-
SSDEEP
49152:tuyiC2YLoiLOjkU9BmerB4sRZZW/697m3VH:T4YLoiVgrB4JG7m
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 346158174ca4079e3fbba97f57ea2ac9_JaffaCakes118
Files
-
346158174ca4079e3fbba97f57ea2ac9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 78KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 828KB - Virtual size: 781KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 663KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE