Behavioral task
behavioral1
Sample
4c348dd60e95eee1766668060745f0ec_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4c348dd60e95eee1766668060745f0ec_JaffaCakes118
-
Size
587KB
-
MD5
4c348dd60e95eee1766668060745f0ec
-
SHA1
d2729440d7c709bab919b63507d6bdad023f05bd
-
SHA256
1c86b6d09e18a45a63ad5f476c94a9a0443dd4b4e945478c97ad1673b6151272
-
SHA512
fb20b58c506227d6bb57699743ce1fe5fc1c912417e65446f4d2a7a3ad6c8802ae046c9cd9ece1306504c0493af84319ed8338890b338ffb973c463507a2384d
-
SSDEEP
12288:zO+HfcQhm5gzc4JlqVas685VxiFOVwYoN2qENe4f4Yloy:zO+HfTmezbHufiUw3ErwEoy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c348dd60e95eee1766668060745f0ec_JaffaCakes118
Files
-
4c348dd60e95eee1766668060745f0ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 556KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE