Behavioral task
behavioral1
Sample
4b4ba13d95fff7af53b57661896bdcba_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4b4ba13d95fff7af53b57661896bdcba_JaffaCakes118
-
Size
1.2MB
-
MD5
4b4ba13d95fff7af53b57661896bdcba
-
SHA1
1470a375103dbc4cbc9db253828f71d5e1274f6d
-
SHA256
ce8587d03b023d18106e46c08474f0fb14d7e8d931c93cab2d5beac5b02d04da
-
SHA512
db78f28e08c3d59b15fe1ca1097654e0cd083ac6caf1673b007c5067e8852b33249df5e7627276cbe6dbf3a610a20f518257458cf5546423aa329dceb1703b50
-
SSDEEP
24576:6+GvnVcHZ04ULk70Z3lBZwqeb3wPD5IZp3iUP:6+GNO+35Wb3uD5IZpX
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4ba13d95fff7af53b57661896bdcba_JaffaCakes118
Files
-
4b4ba13d95fff7af53b57661896bdcba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE