Behavioral task
behavioral1
Sample
85da76b446e0ea2913070625cc05562b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
85da76b446e0ea2913070625cc05562b_JaffaCakes118
-
Size
2.3MB
-
MD5
85da76b446e0ea2913070625cc05562b
-
SHA1
7f60124593f5103c29b8ec4284934f0c74f33a1b
-
SHA256
03d5af54a514956f2a8d4e03b5098975c7c19aaca9b0be7ea5a2a9b260e5f9e8
-
SHA512
973b28f37c63125bece5d12496b49e62c5473ce371843e0a49301995caf2ea0aae45a1e374bcd87f24c45b1aad0b5c9f2164e91dca325faf4d547774b75a90ed
-
SSDEEP
49152:rcnWagltiIM4DoPblU9yT8VFNhDB4DoPblU9yT8VFNhD7:AWaglXM4EJU9s8LNpB4EJU9s8LNp7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85da76b446e0ea2913070625cc05562b_JaffaCakes118
Files
-
85da76b446e0ea2913070625cc05562b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 640KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE