Behavioral task
behavioral1
Sample
43e6af6500bc40902182edcbff39de9a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
43e6af6500bc40902182edcbff39de9a_JaffaCakes118
-
Size
5.2MB
-
MD5
43e6af6500bc40902182edcbff39de9a
-
SHA1
e8d6b4b3d6cb9e3be49f5710b8ce2fab78e9e42d
-
SHA256
bc40efb8155b0b8baed456dc65ae2569f6786176ca6e662bb4cc359a1d99b6f5
-
SHA512
9b0502d41a3ab19505b47b9836ba2513a78cb75e0a60fc0ddd0cf616f7a4e27235f80852db9030ce3f59018cf17aaefc15f5e6b2931a285f8348690e255499ea
-
SSDEEP
98304:8mHic0jebdvQvhiNsHK94NAct6+EdxscBNa1877M8EZboFHFRSArXx1ATc:8mKwKiNsE42WEbBgr8KoRrB
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43e6af6500bc40902182edcbff39de9a_JaffaCakes118
Files
-
43e6af6500bc40902182edcbff39de9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 435KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 15.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE