Behavioral task
behavioral1
Sample
769b29b8003c64d053efee8f190ccd01_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
769b29b8003c64d053efee8f190ccd01_JaffaCakes118
-
Size
807KB
-
MD5
769b29b8003c64d053efee8f190ccd01
-
SHA1
981296ac227aae0a79f040caf90dacb00f8df924
-
SHA256
a85e67ffa4d4a9a4527015256b0ea2c37737120619b83b7ae31a794556945ae3
-
SHA512
f0ebf914e2952037a87624be7cb5ecfa1bdcf207b0c7a42e1a86023b51b91f8efb2a36ed143cfc8d570061caadadcf99c56f9c6bddf6e56e9564d8b8da1319ff
-
SSDEEP
12288:O8zIZAvZD2Eltsi3KqmgTaf4fgK8XMgQUes+zVps0NxJ4ey/pbf5f8J8CkmZh9D1:95ltsYKwTa6g7clbzzif5fBNmZh9DV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 769b29b8003c64d053efee8f190ccd01_JaffaCakes118
Files
-
769b29b8003c64d053efee8f190ccd01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 676KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE