Behavioral task
behavioral1
Sample
443c7b690fad03eeae1535a92ea177ff_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
443c7b690fad03eeae1535a92ea177ff_JaffaCakes118
-
Size
1.4MB
-
MD5
443c7b690fad03eeae1535a92ea177ff
-
SHA1
ae353913ce1ec52ec946a9e547859a7b2f52fd5f
-
SHA256
0a361c633f448749f375a18155140424dbb3e48ef4bad5fbb64620d53f43a2d6
-
SHA512
702de1c3097f041cfe0c5f01abda3e729cc3789bf9ffb77cf362fd36c82c2d13e89c63dba7f7e93e240ade4bce5508b3c9da7e9186161a382174a8cadd80739d
-
SSDEEP
24576:kp+Wu9fH1zXlhwitnKbSXvLHwJwaMSZ7xXH7dlFhgTe4j3/iYn8uSDh5CXyw8TDx:k4VFrwWbXzC7xXbxhgCA3LMFY8T1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 443c7b690fad03eeae1535a92ea177ff_JaffaCakes118
Files
-
443c7b690fad03eeae1535a92ea177ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 155KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE