Behavioral task
behavioral1
Sample
85b891f8b566187c4c8019cd6c6d70d8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
85b891f8b566187c4c8019cd6c6d70d8_JaffaCakes118
-
Size
1.1MB
-
MD5
85b891f8b566187c4c8019cd6c6d70d8
-
SHA1
e930d4a1f21ae6bf1f48221197aa60cc5b379e5c
-
SHA256
07bdc8e740b9e8e3dcd22843703fbfe73c436b9e2c67623e29f2b5f628607265
-
SHA512
432fc6bdd5316d560c3e9e8d23be823aefef35bdc78f407034b810a9d87ab7143da76edee91242c61c200ffd4178d1f670977ed80206b2450e60fdb5bcd5d0b0
-
SSDEEP
24576:C7CQDt7V+h0M3Gw7Ma5vPJflE4GU2lxLA1NbgOIUJ:qtUhzGw7GU2lxLA1NEPU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85b891f8b566187c4c8019cd6c6d70d8_JaffaCakes118
Files
-
85b891f8b566187c4c8019cd6c6d70d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE