Behavioral task
behavioral1
Sample
3def7634c30ec22c323571135d27ed55_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3def7634c30ec22c323571135d27ed55_JaffaCakes118
-
Size
1.4MB
-
MD5
3def7634c30ec22c323571135d27ed55
-
SHA1
78f6ad163fda8318cf203d34c7090fa9149bf51a
-
SHA256
656f4b3c4a4675325c9b9cc4e0caba8b1846f0a822a49020739b404b69153726
-
SHA512
20f8b4652696c880346eccc2dae99c672ec479bcf99360b1a6f4e9885713c92f6a6759b50eebb53ee8891c2b0267649d0c700a344a4b21b913660e345490f032
-
SSDEEP
24576:DLLQq4A7izhoalDAvsjFRkmuZQNL3LshnfsZqIqXSoAG8zBfIAtut6e0mIKqt6eS:3k2UjFRkmuZQNLghnk0So+zBfIAtuweP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3def7634c30ec22c323571135d27ed55_JaffaCakes118
Files
-
3def7634c30ec22c323571135d27ed55_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 884KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE