Behavioral task
behavioral1
Sample
64a13517c716e473cd8d85aebbf3a585_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
64a13517c716e473cd8d85aebbf3a585_JaffaCakes118
-
Size
706KB
-
MD5
64a13517c716e473cd8d85aebbf3a585
-
SHA1
e530fa5b19c9182ddb8b516e5de3cf9a985bc20b
-
SHA256
4b9a955f36f7551526adb14a915c5ff60f3c9fead8efa3c4a2c01327ca2a3b85
-
SHA512
5cf85817d11b581ac96c49a5efc4e828f5fde24e478e7c9a3cb05bd3ac4c1d4120c5244bcda08e6d3bd465f56e51e5422740ed91f9c8202a7318c1363a4a4ad0
-
SSDEEP
12288:FIyspr0l2pe+3gLTK3w/DXLb4CI2lZ/VpCxYDtBOf1MzN6DunhAp1mD2lu4eQI5s:2rA2p33g/zLbdlTBm6kanhi22Onj0t9H
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64a13517c716e473cd8d85aebbf3a585_JaffaCakes118
Files
-
64a13517c716e473cd8d85aebbf3a585_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 631KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE