Behavioral task
behavioral1
Sample
415fc83995272b36248ff9df0e8cc95d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
415fc83995272b36248ff9df0e8cc95d_JaffaCakes118
-
Size
840KB
-
MD5
415fc83995272b36248ff9df0e8cc95d
-
SHA1
cd3e02ec2b39470aea96be6f1eb1b55c3dfea5f1
-
SHA256
3b100a1a79f2a796da8f7ba0209fb5529ebe0974f308c8a410339d7ea709d1e6
-
SHA512
7a4960c11ad539b06cc63d27b8ce426c589b6ddf6bf9812f496b338c1c0ba6017395d7917cb1d982000f526dbcb27aae36904c93b79c26a306f97bbb160a18cf
-
SSDEEP
12288:Il/ynqJ/mZE6hzQXktXLvkNna6jkRk0+7fzAoPGOQcYTxyetG3npzlUvVZAsXYNu:whNktAn6K0+DCOYTsn3pz6vQsXYnQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 415fc83995272b36248ff9df0e8cc95d_JaffaCakes118
Files
-
415fc83995272b36248ff9df0e8cc95d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 232KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 588KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE