Behavioral task
behavioral1
Sample
6a5bd4e1dddae147b38ca8ba60953298_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6a5bd4e1dddae147b38ca8ba60953298_JaffaCakes118
-
Size
3.9MB
-
MD5
6a5bd4e1dddae147b38ca8ba60953298
-
SHA1
d43748c13e4d01a80f1657b6b77c2b202fdcf7bf
-
SHA256
f81c7d7d5d983fa2b0d6f004903649fb49f4d10da2718332ae13b9f55788f915
-
SHA512
29c24b99595b1acee12b75b7e39cfed5c840e36d04016772fc4cafcd4e8ae36efe3140f0f47974775ee21b3cd997cd3a3f8e98f3c6e4fe61518812b3dbd96b31
-
SSDEEP
98304:EKyTxC8nF7vOVeTLf9LZSSIjB/2Sm6eUdJ3FsfWM7o7dF:EKyFCsFiVejIVJQUdp6fWM7q
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a5bd4e1dddae147b38ca8ba60953298_JaffaCakes118
Files
-
6a5bd4e1dddae147b38ca8ba60953298_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 423KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.8MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 621KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE