Behavioral task
behavioral1
Sample
454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118
-
Size
3.5MB
-
MD5
454b2911f01fc7390cad0e1cd0bdd7a0
-
SHA1
2ca2c69d5c19e7ed4a67cb585de7a2e33c48d554
-
SHA256
3b3f4bf2339aa8da609b52b4bf9d86482298261d320dcc36d3d627f1044e12ea
-
SHA512
2eb57512b5b8fcef6bc9aa7bef11975ff1390d9679419f2c26e017787ec77badfb4d33ee2e459c44e81ac4dfca3a6056461fdfe23f9d18b403a4c0a6ea307a68
-
SSDEEP
49152:SY78SGAcC+NurXM7A03AGtkkhvJn2NJeZuuO0FwKrThMqdVM8yrjNixsWkhM29b3:dx+2cJSGZM0Fr3dzy4xdRYPy2+XGBK/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118
Files
-
454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 386KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE