Behavioral task
behavioral1
Sample
6819e9874c9b4f8b8d25dadc9349e7b1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6819e9874c9b4f8b8d25dadc9349e7b1_JaffaCakes118
-
Size
1.4MB
-
MD5
6819e9874c9b4f8b8d25dadc9349e7b1
-
SHA1
d3b4d18b7f14c90e349fb940a1c762c0948de6f2
-
SHA256
2150a8defebca891e58e3365ebcaefb702dc6eb27cdfe907652a5d27d0856cf8
-
SHA512
c2d56b3b5e8c57507e185b14a10e250d78bc633b1d5ae6501d87e8bb1b1d5b7530409488d31439346b26353a5620187fc8e0e3b369e17c5176fb3d9d49d945ee
-
SSDEEP
24576:URk9mpu0Z+HRMYWda0T8RTyojFxUljReMKZWrPdAWX9ynipGRNutU42ytL/7BPc:5EBZIuT05XgReLwPdAWX9ynipGDuG4z1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6819e9874c9b4f8b8d25dadc9349e7b1_JaffaCakes118
Files
-
6819e9874c9b4f8b8d25dadc9349e7b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 315KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 435KB - Virtual size: 875KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 628KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE