Behavioral task
behavioral1
Sample
67c8e20795985f71a8f83911e0824128_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
67c8e20795985f71a8f83911e0824128_JaffaCakes118
-
Size
397KB
-
MD5
67c8e20795985f71a8f83911e0824128
-
SHA1
76d27439b037355af9b72fddbafca3432c1f752b
-
SHA256
9b04198b6b9d5fea5a438cda3226ffe141e3bb71573d9c56037b7a2b78f5fcb4
-
SHA512
249569739e0f66069b958b3e622f23d9fd68977d86320c3e3974c35478ea273c6671b6c7f2d4bd63246cc251591ad6ab44664ee588570b2141fd71cb7e8d6587
-
SSDEEP
6144:yfvU4mU2Tf7JHJ1cXweoEEdnhDQY7VsfH+vQ8oPMh0csaqAzS6feRnFcSdXkTcUs:pDt7JfcuEG7VaT8MEzqIS8m2Sd0T3O3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67c8e20795985f71a8f83911e0824128_JaffaCakes118
Files
-
67c8e20795985f71a8f83911e0824128_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 357KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE