Behavioral task
behavioral1
Sample
8b37fde3d52f3829203d073fef87af66_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8b37fde3d52f3829203d073fef87af66_JaffaCakes118
-
Size
784KB
-
MD5
8b37fde3d52f3829203d073fef87af66
-
SHA1
148e1ebe1c9efc1a8d649d9c33e75c71fe9e3b78
-
SHA256
e0879e4a9f1d35e44003cc2ac606647600354d90876791ab02e754d2722c5259
-
SHA512
cbeaee786320f4bad063907bf944458b60f02aca6b095cd95d3478833829ff8d2170cc88c9890dee1dd59e98514d058db33965d13aac04fd0de21d74ed759966
-
SSDEEP
12288:p8ueGKP2oTNrJ3AK3FwPKg5o1k/8F/Dr7w87JqpOR3uQwod/eRAveEfPG5tY:aPrprRAeFEKgakW73huc88fPG5tY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b37fde3d52f3829203d073fef87af66_JaffaCakes118
Files
-
8b37fde3d52f3829203d073fef87af66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 696KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE