Behavioral task
behavioral1
Sample
71124094252be4de026d7d3fe8aa82ad_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
71124094252be4de026d7d3fe8aa82ad_JaffaCakes118
-
Size
1.1MB
-
MD5
71124094252be4de026d7d3fe8aa82ad
-
SHA1
ac2c781caff69b178a21b26bf3dda103fa631316
-
SHA256
1331582d99654ef07b7669d57f97c3f5e948b8117f342991b182f3194b51de87
-
SHA512
0a9467f945e310bf8da177f48ad3c9e04617cb97ae0af4e4f805f5d7e9de694be9f700ca36c353c9cf1a148d76f81895dbeaefa5ebe4b5699ac83afa267cdc9c
-
SSDEEP
24576:CBpIrgvxStIVj8K1O9POLNOM6ny1JPaZdVKyXbGoj:CBpIr4VIwBNOM6y1JE/Go
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71124094252be4de026d7d3fe8aa82ad_JaffaCakes118
Files
-
71124094252be4de026d7d3fe8aa82ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 307KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 720KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE