Behavioral task
behavioral1
Sample
3dc296f8525026332e53797f23ed8e5b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3dc296f8525026332e53797f23ed8e5b_JaffaCakes118
-
Size
945KB
-
MD5
3dc296f8525026332e53797f23ed8e5b
-
SHA1
900fb50afa5d08b1fd9aa7b622db5a0c80f8bb70
-
SHA256
dc7d6ea05439cdc02fffabd96278014425074a6d1407b801b030ca4f892a8665
-
SHA512
07e838fa764c29d59230048b25ecc86ae217f43c4e771466735662ff43aa7f0677e61ae1bee342d506566f50faf235bdf6192dda10ba3522baa4722d890a77d7
-
SSDEEP
24576:b07OQqEQiNfga2QWeIauUJfxGoaqchRB35LJmAc8:oZ5gabjIauU/GoaqchRdBMe
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dc296f8525026332e53797f23ed8e5b_JaffaCakes118
Files
-
3dc296f8525026332e53797f23ed8e5b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 306KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 620KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE