Behavioral task
behavioral1
Sample
3512750745097f5444055e3c100a97e5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3512750745097f5444055e3c100a97e5_JaffaCakes118
-
Size
816KB
-
MD5
3512750745097f5444055e3c100a97e5
-
SHA1
de8d8a282d02b4e2e8d031166fd03fd5ee034384
-
SHA256
545a3a024955cc412c11cd13bae968244c4adea7e328137fb6be5def917a3492
-
SHA512
c117942c1c52bb1a19d0ac5988d757cdf505481924162dc60f5a65a9c3de360ba1ec70bf1d22f236cc0890e12f8a2ebaa30de23692dccc7c2975dd0616cbfbea
-
SSDEEP
12288:sj360qMtA5rZYjfGJA5mouwyTwl2lfIrtexgtDTKfTehixCkppbCRrcd9QkyRnGb:2360ql5zquPT42RI5YVrznJCNV9FrSJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3512750745097f5444055e3c100a97e5_JaffaCakes118
Files
-
3512750745097f5444055e3c100a97e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 669KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE