Behavioral task
behavioral1
Sample
4582a19202bbb3353d5b04f1e7c67fea_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4582a19202bbb3353d5b04f1e7c67fea_JaffaCakes118
-
Size
782KB
-
MD5
4582a19202bbb3353d5b04f1e7c67fea
-
SHA1
ddd43b4b525006e0ee94bbee09190c31dba03369
-
SHA256
5561b6687d76121db752ed7cdf57fdd85f05207e128402ab50f4a5bbefadec13
-
SHA512
09b3d100901590c6cf8ed1bfba7068b893a42d419180adc7f45ea930aeb3d995eaf4d6b1ceaa9e40d03ab1cdb26df34e1d3868303abd7676bab011a35ed27cf6
-
SSDEEP
12288:rWRTsPEA/1RmN3dstDJViFfw1i4UTsRRHaZHilchuYG7133/QKmUaO8:ax+1oN3dstDJVOY1iFTsRRHaQBvQk8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4582a19202bbb3353d5b04f1e7c67fea_JaffaCakes118
Files
-
4582a19202bbb3353d5b04f1e7c67fea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 746KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE