Behavioral task
behavioral1
Sample
6a8a243a6e88acd45b57252399dc189a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6a8a243a6e88acd45b57252399dc189a_JaffaCakes118
-
Size
6.5MB
-
MD5
6a8a243a6e88acd45b57252399dc189a
-
SHA1
5c38471141a44dd28cddb182df0f1ca1fc908750
-
SHA256
d3f3838dfcedaeb2abca1ea7ddb320be5491612720d3736511c4339ed08bfde9
-
SHA512
9d0645c6b326847f24da1ff12a3d6ccc07bc29ea786fad0eb58ba5f15ecef0838bde283c8fc2f1463b029fcad6bfb1724f2ccae0b2cbede010f451c9938803a9
-
SSDEEP
98304:d1Pzx3TAR8JJzZdlDHYb2J8QVN22vBndU9Y5YwyT4mr1K1JoC2pyZmELxk4OIl:zPNjAozZD4b2JDVQ2vBqYevy5Bpl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8a243a6e88acd45b57252399dc189a_JaffaCakes118
Files
-
6a8a243a6e88acd45b57252399dc189a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 667KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE