Behavioral task
behavioral1
Sample
62441018b09955d1c42e7a0fba375359_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
62441018b09955d1c42e7a0fba375359_JaffaCakes118
-
Size
659KB
-
MD5
62441018b09955d1c42e7a0fba375359
-
SHA1
9c81c5d7efd63fa8038f51bdc312b86d7b9096ad
-
SHA256
0d05c16f2169ed0bcf12db79e4624424db74a9922df94c711100172ffcd46845
-
SHA512
d94ce27053e4436c0fa90b93e7c5f93ceca3eece5ffa01fe3fc8c6e96c30d78b618dedfa9a7f23517b015f9ad66471d633f768556782ebf87b8b0fdfa38e3b97
-
SSDEEP
12288:8TTC1pIjjnNKJxj+Yjzf5ZvfSy8fd8LUHxBPKTrmOQdELJDHH0zaLBVc2FQqN:1ujzgxyaDfq2WC/mTdkJDHCASqN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62441018b09955d1c42e7a0fba375359_JaffaCakes118
Files
-
62441018b09955d1c42e7a0fba375359_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 628KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE