Behavioral task
behavioral1
Sample
652bd610091bdb0e5bcc9994430ecac4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
652bd610091bdb0e5bcc9994430ecac4_JaffaCakes118
-
Size
1.8MB
-
MD5
652bd610091bdb0e5bcc9994430ecac4
-
SHA1
4389a9e90c5b09b4ba56e98da482347fcdf29707
-
SHA256
1cf4426e2887c5b44217c5fe0cdeddb6186a8a00eff4558a6d3637f9a5e5e958
-
SHA512
b3e90f18dd23e610b7928c37fdede390f38a87915738a1d92bf8339e0a4bd701c320874c324430ff0d2e11cc3cbfaf72bb024b3c507886739c4b2ced3b2351d8
-
SSDEEP
24576:aL7P1DlD61mhXU7GT6JkcmF6vLRuWRJQTLMeOZBfaZSJnVCUp8qM3q37pREh1xJa:mZNhgrTRuob7Hp8n2Rs1x5/Gz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 652bd610091bdb0e5bcc9994430ecac4_JaffaCakes118
Files
-
652bd610091bdb0e5bcc9994430ecac4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 476KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE