Behavioral task
behavioral1
Sample
43b6fb2e9e6033153af5571342211e07_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
43b6fb2e9e6033153af5571342211e07_JaffaCakes118
-
Size
4.4MB
-
MD5
43b6fb2e9e6033153af5571342211e07
-
SHA1
cacacaba797516d9c47ecc0fef9b6739a8c4bafe
-
SHA256
2915d456e2d4bad9b2da8ab750724b77b377e92135b9627ed663a4d0997b6d7b
-
SHA512
4b0be532971b1e27d4282f5e12910a72d684591774dbf4376df6a4f517e017b86c3c264b11be024c64ec9c5b76da8b2ca4a6ff7c1951bca24464533cb2965c59
-
SSDEEP
98304:MxzpEgpTcbOZoIGTloumU0C60Qr9oJyYKfpy0WjjX5yxPPVOwE9wkv1S0V:GzfZ3JG0T/BoJy1fyknVrESk0o
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b6fb2e9e6033153af5571342211e07_JaffaCakes118
Files
-
43b6fb2e9e6033153af5571342211e07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 450KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 21.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 601KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE