Behavioral task
behavioral1
Sample
615d7fd4d62dae149796911a7d8b5b11_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
615d7fd4d62dae149796911a7d8b5b11_JaffaCakes118
-
Size
1.3MB
-
MD5
615d7fd4d62dae149796911a7d8b5b11
-
SHA1
a16a996470b28c9f399249c75568fb57e3a6a2ec
-
SHA256
5600f34c7960e0a6d1f3b17df529b0fba7976c5b5e312976d2be82b0cea3cf23
-
SHA512
80ea3d2e06a41ebeba3570e407bd61fb6649459a4a3c8ffb7adf87b01330b8d86a77874258d0e7f47405d96fc21e93d967aac368fb23bb1f3f5ea6cc42542894
-
SSDEEP
24576:bg1N+z59IeyPPLCeZRKU+2Zs5El+noCiz3+adTyOlp2:E1Nw54PTCeJs5wABUuWTZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 615d7fd4d62dae149796911a7d8b5b11_JaffaCakes118
Files
-
615d7fd4d62dae149796911a7d8b5b11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE