Behavioral task
behavioral1
Sample
44795b914256e859b344536b5d192715_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
44795b914256e859b344536b5d192715_JaffaCakes118
-
Size
692KB
-
MD5
44795b914256e859b344536b5d192715
-
SHA1
2ae500640c99a237bf9202ab42d16b085bc763bb
-
SHA256
740d2ab1389be3c74e69b8a1a11bd6943397a3f556d8e63f374564464dc9f201
-
SHA512
4e5580155d5fe485d199a2962e5de3fee08f92c8e38533f3ea3de80509c385f71726fbfd7d811d9aa529b7df1fd4bfcd84021a6e88d491982ef83f779834ab00
-
SSDEEP
12288:F4pr0l2rtIHrm01YvUcddgr+Vw8AsU5N1DOZBFBNct4wUPiXY:FkrA2QwUIsmRAT5NNObF1z6I
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44795b914256e859b344536b5d192715_JaffaCakes118
Files
-
44795b914256e859b344536b5d192715_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 617KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE