Behavioral task
behavioral1
Sample
3afd27d62627f1ee19e8d3084451a276_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3afd27d62627f1ee19e8d3084451a276_JaffaCakes118
-
Size
766KB
-
MD5
3afd27d62627f1ee19e8d3084451a276
-
SHA1
453a06128d4df82efa9cc7c88247ffb5f5c05a67
-
SHA256
68c1663a3fde8f4442ba69b9b403332c1a98483b1a492bc7a48e9940d5af78ee
-
SHA512
124a4f0b9d18226145d0d4206eca4ada3399079825bbcf0fa6031ed3d549e0e0b87fac6d8af607ab88f2d8357ab9e9de70f49493e9204e7991a9a5f95bf04fb9
-
SSDEEP
12288:cUHnRyTxPNG43HQWeX2PHydMj2xfrYlc7gQMUwDfu0A+C+fkcs:c6RyTBNG43H1eX2PHydMyj7gjUSu0NM5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3afd27d62627f1ee19e8d3084451a276_JaffaCakes118
Files
-
3afd27d62627f1ee19e8d3084451a276_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 633KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE