Behavioral task
behavioral1
Sample
698615e37c7a8f6b4a3c1e0f76b807f4_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
698615e37c7a8f6b4a3c1e0f76b807f4_JaffaCakes118
-
Size
650KB
-
MD5
698615e37c7a8f6b4a3c1e0f76b807f4
-
SHA1
3eddb4ecf5cfc1308722b5a1b1ea925588d2a147
-
SHA256
c0e19699e2c1ebbebf7f13559cd159a50a065166b7f08d25e6113a47465a62b6
-
SHA512
02cddfafa5f24f65c3b7d20b022f299d4e661a09ab95dd57de37facce93fec72c9bd202b6cb00102eacf12bf44115ce1e251cb8a72036e0f3e43f23024aa7903
-
SSDEEP
12288:uOFOLOap4WUjewZvNzFZM1QNtzKlvSLdmmd7QS59NtHThAglIi1cKnbX1c9lz9ZP:yLPBeewZ15mytg6Ldh1DH1AwIi1BbFcn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 698615e37c7a8f6b4a3c1e0f76b807f4_JaffaCakes118
Files
-
698615e37c7a8f6b4a3c1e0f76b807f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 818B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 154B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 620KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE