Behavioral task
behavioral1
Sample
862c0852cde5e89c00944d2749d75574_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
862c0852cde5e89c00944d2749d75574_JaffaCakes118
-
Size
1.1MB
-
MD5
862c0852cde5e89c00944d2749d75574
-
SHA1
358b6856eda366101e752e59a0079ba4ea300213
-
SHA256
4e7d0daad97b72f4b77cc6e7b291597308c3507b594dd5403d04002593443e94
-
SHA512
4bf7b19b3240196bbce5d750856afdc2adf2922940f565a8478bad0bc0fc65c636cb260ae425cfdc80ffae3a34310776dcf6a776d63ed744b74d5025aa216986
-
SSDEEP
24576:oKNRcCea6SD/dkFS8aNtGGfsWlS8N/ZT79rdRm/qC:ACea6SmaT0WM8N/Z/1l
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 862c0852cde5e89c00944d2749d75574_JaffaCakes118
Files
-
862c0852cde5e89c00944d2749d75574_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 205KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 885KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE