Behavioral task
behavioral1
Sample
76f15f9b6273cbfdc48ce722cbbeb8c1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
76f15f9b6273cbfdc48ce722cbbeb8c1_JaffaCakes118
-
Size
672KB
-
MD5
76f15f9b6273cbfdc48ce722cbbeb8c1
-
SHA1
77c8fcbcb4ee1d8aeb99ea0be6728711d89a24f9
-
SHA256
1b264761c1271ba608c3c9905f108402447845cf5db50ae10b3946741425a8e5
-
SHA512
5bc68ce1d09b22eb9a98e565215e703cf2941aa0941f6c6500366fb24efeb5972e1676df86d8bd297232c0f1c6904589b386d45ef1c525628e3c1d4babb169dd
-
SSDEEP
12288:XeaN0A6SxUpoLSlvamDE/hZwASQ3iOmLJnA+Q5qCtUrKCJUOOl7/6m:uahxuQOU//wAl3iOaJFMfjCUym
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76f15f9b6273cbfdc48ce722cbbeb8c1_JaffaCakes118
Files
-
76f15f9b6273cbfdc48ce722cbbeb8c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 113KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 553KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE