Behavioral task
behavioral1
Sample
440db48fd4c03c69760b8e5723f0b593_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
440db48fd4c03c69760b8e5723f0b593_JaffaCakes118
-
Size
1.4MB
-
MD5
440db48fd4c03c69760b8e5723f0b593
-
SHA1
82e9cb1d25c1e383b733ca2903c17d8b4096a0cd
-
SHA256
70947b036347f4e0e2ff43bd2669704f5aeeacf65178a326f353cef679ce5694
-
SHA512
54dc068c2ff65b1a51c5d4e4abc984584a224e4c42b098056cad04bcf20c4f7cd0314e6c739f5b8b481a637f374c34428187c9f8a6b3d92eefecb3127dcd87f8
-
SSDEEP
24576:7x2a31H48vJbfzEK5zOxlvTWj0OFBS7X6lgYDV54L0q+IiFCLLoqyHtJZin0Je7r:7xRtpzANWITIgYB+AVIiFCL0qyNJZg0u
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 440db48fd4c03c69760b8e5723f0b593_JaffaCakes118
Files
-
440db48fd4c03c69760b8e5723f0b593_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 610KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE