Behavioral task
behavioral1
Sample
4183be964027895500dcd44342efb88c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4183be964027895500dcd44342efb88c_JaffaCakes118
-
Size
1.3MB
-
MD5
4183be964027895500dcd44342efb88c
-
SHA1
60444efcbb94db59298586ceba8a94db8cfd5375
-
SHA256
d8e23ffe1195d09190f39030a46d9093a9e2cf3e05ce28f91198f04f98182148
-
SHA512
687bf0bdcf805f9d2764dcf794c0dd78ccd2ce56abff09cb375e6e9a2eb5a4813469153babb2fc7f40ab3a71a80b486cd8b450605ed5d9bb2ecead0dadda7378
-
SSDEEP
24576:9ECug1PAWDEowzOQxP8l01UBhb+15AQzQNOEOOuc3+lXxGLM+4wtbZID9PWg:9FuYPAPvzOQlSfoE9uIIBSlhZIDF7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4183be964027895500dcd44342efb88c_JaffaCakes118
Files
-
4183be964027895500dcd44342efb88c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 102KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE