Behavioral task
behavioral1
Sample
70e659335c7e3c23663b166c6af2ec01_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70e659335c7e3c23663b166c6af2ec01_JaffaCakes118
-
Size
542KB
-
MD5
70e659335c7e3c23663b166c6af2ec01
-
SHA1
b96d3d3101b06e263452f7d84e8a21e2e14e3702
-
SHA256
44418735c4ba7ff945ff577b33da7ca9a7d02f7fe03200696275c9413cc1ade4
-
SHA512
21f1899059a0824b082fa4dd5f234d08be3d7153c2a919da7e4580d99c6878bc549e167d7341cc0d35d661f813257c34778df9a0f4666a15312f9ffec8c88e70
-
SSDEEP
12288:BDoZ4szV86ovzqgNP9yBL0mU8MACYNWn5nKgvifRvGTLh6/Rc0nwukP:BsnzVwqVL0lYMUvCKRpnG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e659335c7e3c23663b166c6af2ec01_JaffaCakes118
Files
-
70e659335c7e3c23663b166c6af2ec01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 114KB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 421KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE