Behavioral task
behavioral1
Sample
8a6cd9628e86f50d3df8373e0cc3907c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8a6cd9628e86f50d3df8373e0cc3907c_JaffaCakes118
-
Size
1.2MB
-
MD5
8a6cd9628e86f50d3df8373e0cc3907c
-
SHA1
cf62b02fe96cf192ec4c52e0c68f703e5d7147d0
-
SHA256
38c560b5019dacf87d3d317ab59e32b44245a40d0242199df48a95e091b8bd14
-
SHA512
735efc625ea888b809ebc8b63f04652cb1a0072e0c5125fb3c39ec8e5059fc028690b2b5ac9fc1ea35204f7ff84b0258b673c6b7a2497d1a2a50f1c2471c557b
-
SSDEEP
24576:w9mJuCuf6E73mYv5t4kUIU1W6D90+lDkcjSG+6STGO6R9VyKV:YwsfJ3mYv5t4kUICDZpdXSKdyKV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a6cd9628e86f50d3df8373e0cc3907c_JaffaCakes118
Files
-
8a6cd9628e86f50d3df8373e0cc3907c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE