Behavioral task
behavioral1
Sample
40b2995029496bdf612a6f0eff46a7a6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
40b2995029496bdf612a6f0eff46a7a6_JaffaCakes118
-
Size
697KB
-
MD5
40b2995029496bdf612a6f0eff46a7a6
-
SHA1
f40193aa5b84b7ed35df45ea6c0a1dfff8ad6ff7
-
SHA256
3031fa32d503e65120129698497acdf3104dbc4a4801cea884ff45452a2a0ec7
-
SHA512
a3ef3c6e5f0f78c32611797b79af270cdf4bb41cb0c4cbab184475a4360c6e97c4eae6eef11fad78c9cacc956eca49a7b09848f9f2137474092f5612856fb8fd
-
SSDEEP
12288:hD7F3Ns1WHXHXdc6XwYWw2C7u65Qyt8h4CFBmqn4t+naT7p3sbeMMLQ5frj0:hDp3Nss3H6Ew/w9S66yeatQaZ3siMMcy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b2995029496bdf612a6f0eff46a7a6_JaffaCakes118
Files
-
40b2995029496bdf612a6f0eff46a7a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 641KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE