Behavioral task
behavioral1
Sample
675fe28859ebfc12d1f2d924befa70a0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
675fe28859ebfc12d1f2d924befa70a0_JaffaCakes118
-
Size
696KB
-
MD5
675fe28859ebfc12d1f2d924befa70a0
-
SHA1
fc290aa9343cec8ed3bb19bc8609db47d4a60c2a
-
SHA256
9252dbb691318f1b5a65fa421c10583eec8ce57089832423019853563038f226
-
SHA512
91a0a37394a28f3d3dc930d99d43c6e33fbf4da6e9fb9a3985c06966eaa1d84f025cd8a102d2bbdc91020b24635d2fecb57a7daf633e28d87a705e1d4905da73
-
SSDEEP
12288:5dAw8mFTh+ueaUjc6/NF/7mnO4jsWoUuznFc5/fFLdZa0GCvqGbGSVSOseVx/0O:5dAw5ThqaUocH/CnOasWwzM/dd5BidOT
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675fe28859ebfc12d1f2d924befa70a0_JaffaCakes118
Files
-
675fe28859ebfc12d1f2d924befa70a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE