Behavioral task
behavioral1
Sample
431317e0e6fbddb0d31c074e808ee3dc_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
431317e0e6fbddb0d31c074e808ee3dc_JaffaCakes118
-
Size
585KB
-
MD5
431317e0e6fbddb0d31c074e808ee3dc
-
SHA1
04989e1ca12ddd5a52425d295548f5a0835a78b8
-
SHA256
90fb681cf0a1205607b16ef9921b84638ddeb2854ff4bf57c7561e48057351ac
-
SHA512
0a96ce7edcc46cfeb9bccb953fcb78276cad1bcce091823c4d45f623c3075fd5fc5ad4d006da431de3c3ce4620cbd1dbc190e786ad6f45c61a1accd29af30d01
-
SSDEEP
12288:RmY3AxfU3HQEUxHiu/TE0G5UC1mGt1iTGpznYHO3B6vEye:RmY3AxNCK3G5/bIqFYHwO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 431317e0e6fbddb0d31c074e808ee3dc_JaffaCakes118
Files
-
431317e0e6fbddb0d31c074e808ee3dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 577KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE