Behavioral task
behavioral1
Sample
379a216aeb8eebf59c968f31ebd1a5e3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
379a216aeb8eebf59c968f31ebd1a5e3_JaffaCakes118
-
Size
547KB
-
MD5
379a216aeb8eebf59c968f31ebd1a5e3
-
SHA1
c9f6ae1af7258d9a83158a72858ba53266f98a73
-
SHA256
e5aa066e09937662a87ffac99d54621c666533f8c6d9ad5d7633909c658a88fc
-
SHA512
95f682ddb2bfd8f1fa4e6b071ca5d032c3803ab6266f1f521ff705956147ed7ec5af9afdaf282bff62c3b94caf40cfe304dd29a73fad338335d6693bc79f5740
-
SSDEEP
12288:z3c8cix2FwysjeI0FPTGCJzX6Jy36zQdLHDFdnIQlbKz2pTZLyyC3X:z3vcGSTsrkPTGCJeJy3NNHRN5Kz0TZ+z
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379a216aeb8eebf59c968f31ebd1a5e3_JaffaCakes118
Files
-
379a216aeb8eebf59c968f31ebd1a5e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 494KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE