Behavioral task
behavioral1
Sample
640b30a038cee79f5e3c0d0d31692840_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
640b30a038cee79f5e3c0d0d31692840_JaffaCakes118
-
Size
672KB
-
MD5
640b30a038cee79f5e3c0d0d31692840
-
SHA1
5f98110686d4aaa545aedc003039efcb880b0f2a
-
SHA256
09a84fee4a6c440c0d5201b68c6f436983cb8843920ceed3f5c23e0fd2055ad4
-
SHA512
961202a389db8922f47d7912f73385e89ee4815f291143563a9ee1349a94ac8094b2db5359b8677104910782e7c644dfb7910f5bac1fc0aaaae907b63eaf43ae
-
SSDEEP
12288:9CwR8E4eDKZX6ei4Ldk8pH0mF4h7uOttlsaOSnsGz3CrK5kgBNr47z:gwlKJltNF4h7uOnlZrPN5kgTrQz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640b30a038cee79f5e3c0d0d31692840_JaffaCakes118
Files
-
640b30a038cee79f5e3c0d0d31692840_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 612KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE