Behavioral task
behavioral1
Sample
711f6948113e0cea1b29e72f481c9177_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
711f6948113e0cea1b29e72f481c9177_JaffaCakes118
-
Size
672KB
-
MD5
711f6948113e0cea1b29e72f481c9177
-
SHA1
187e2444a9257a9c05b8ef460ba798feb336467f
-
SHA256
11a194b0425771866155f50302ed588228491bcf03253b697466a3b52e57fa39
-
SHA512
057c4c9065331143f9b6525ec0a11a3d900769bdd426a62578e2054d4c4a966e2df5efc7c7ca73eb76d8517c022d9e6b99ba8efd0231ee5c4b93514acf4d73b2
-
SSDEEP
12288:yCCjPmClGUjM5QRvaeEl5WP4sNNqAh4C2wC/kZnwvqsYWc+SMowRe/g8P:yHjPmxIRieElg4smhC2wC8IeWlToye/r
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 711f6948113e0cea1b29e72f481c9177_JaffaCakes118
Files
-
711f6948113e0cea1b29e72f481c9177_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 652KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE