Behavioral task
behavioral1
Sample
63f623b7da9156cde06a30580ed37723_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
63f623b7da9156cde06a30580ed37723_JaffaCakes118
-
Size
2.1MB
-
MD5
63f623b7da9156cde06a30580ed37723
-
SHA1
98f3221b98d0aa111f86cf499037e7af6f8dfb4f
-
SHA256
a3d05539bb8f5cddd07feb6a9b7dd8da93e39da58f21cab40562af6ced39f186
-
SHA512
cfe0d85474ed29b3e150d1434f8e2f915ac8658e053ab9a41b834071c503473263cae242e91e527ebf1018cad1751740e5900d3ed71eea538d4b20e3536ab69f
-
SSDEEP
49152:AFf0NFX9UVDFsSOEi70rrRbunTmPUnwBoC56IKNFX9UVDFsSOEi7:Vd96DFSx0f9unTMQOoC55+d96DFSx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63f623b7da9156cde06a30580ed37723_JaffaCakes118
Files
-
63f623b7da9156cde06a30580ed37723_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 125KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 603KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 620KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE