Behavioral task
behavioral1
Sample
692838894acfc73cb0aad3b3f27bc1ff_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
692838894acfc73cb0aad3b3f27bc1ff_JaffaCakes118
-
Size
677KB
-
MD5
692838894acfc73cb0aad3b3f27bc1ff
-
SHA1
19791b0e287721be6bf2f5679b5092a4ab4a51be
-
SHA256
41f6c37ccfeacd2928d1ed3811b630dac168f45a8690ecff0af98c9ce6ad629c
-
SHA512
12c11e925e4dc47c6f494d994bf23283befe65d90769de34a35240dc8a31bab488d7514177346eb6f0a6950d9323410c9ff434b2244c21d02c9a112832608bb0
-
SSDEEP
12288:jHDpLOtAjvWN4mtPmjfze+43TXpJZVrk6peGrJfXOzLQYClejNpYcZv5:jHhOtf16c3TZJZVFlWz1fj7Ye
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 692838894acfc73cb0aad3b3f27bc1ff_JaffaCakes118
Files
-
692838894acfc73cb0aad3b3f27bc1ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 639KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE