Behavioral task
behavioral1
Sample
38b5f99cbfe222a106aa71fd0c42da93_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
38b5f99cbfe222a106aa71fd0c42da93_JaffaCakes118
-
Size
1003KB
-
MD5
38b5f99cbfe222a106aa71fd0c42da93
-
SHA1
49391775c54107c43318b6d66aa1946f4bf36e31
-
SHA256
aa43edec6a1d46029e572ea4e984b520894b87550d86edba4ace2f154537fb29
-
SHA512
e418adbcbf1d189d06f21517aee64e8a93cb6dc4fd85ea6b6389945f773df765a8740fa232521271d304b602c707ba1503e56d960d0d73c35e35ee8ae8723736
-
SSDEEP
24576:4Ko996Mu6jW62ijfDW/6TTXlhN7Q5ME0jYdzBUS6dW/zgYHK:T6jzb5FrE2YtBxcGMoK
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b5f99cbfe222a106aa71fd0c42da93_JaffaCakes118
Files
-
38b5f99cbfe222a106aa71fd0c42da93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 94KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 660KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE