Behavioral task
behavioral1
Sample
408a12105488b233825e79c270b3fb42_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
408a12105488b233825e79c270b3fb42_JaffaCakes118
-
Size
1.3MB
-
MD5
408a12105488b233825e79c270b3fb42
-
SHA1
9587c95efd5db59f8e57d49dec5a2cf1ed7f1ecd
-
SHA256
fe2fc36751171fccfea99cfa0d85d88c6e82f8b1e763cfa10e936d33a13cd936
-
SHA512
d67fc07151d6a79a162253020ed94a156d75937736e29112a515e164d519da256e077887939b636e3774d9d6cce55b83d0e0e9ab0be0357a18b3d7c3985126cf
-
SSDEEP
24576:nQ8mOSfBr6aZHpDO9aY9iE6jCSHnUpbykA6ZnIunOL+IbwhmU88QwBF:Q8mpJr6aeGEw1HPkDpOLcH8xcF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408a12105488b233825e79c270b3fb42_JaffaCakes118
Files
-
408a12105488b233825e79c270b3fb42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE