Behavioral task
behavioral1
Sample
465a2baeed8d3af4bd8dffdcc156e563_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
465a2baeed8d3af4bd8dffdcc156e563_JaffaCakes118
-
Size
1.0MB
-
MD5
465a2baeed8d3af4bd8dffdcc156e563
-
SHA1
70186506e81b531a85aafb8d77afe188904959b6
-
SHA256
4c038f55c0066bd05679b1fc0b5ae3a5edb055614a559b5f7aba192829cc5aaa
-
SHA512
2ee8630fcd02047b8ce1bb84aa88a1fd239b7eef276feaef6e2553ea87203670c749c29b5e9addffb8ffe0e9fc5c15dcf1acd2644e1b065d37eb48f4c473983e
-
SSDEEP
24576:qi7rOXjK/Lku1vVnooJOk6m8keMwhP9Hl1i2quU9E5z6F2Hp153uaa1:qiwNovVnol08keM+lHtU9qz60HJq
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 465a2baeed8d3af4bd8dffdcc156e563_JaffaCakes118
Files
-
465a2baeed8d3af4bd8dffdcc156e563_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 550KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE