Behavioral task
behavioral1
Sample
8cf145f4b583f5197c6ad37e3b447bd2_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8cf145f4b583f5197c6ad37e3b447bd2_JaffaCakes118
-
Size
1.3MB
-
MD5
8cf145f4b583f5197c6ad37e3b447bd2
-
SHA1
bfed247ade6ac3d3ba8ee5c55ef1359a547d197e
-
SHA256
f0dcfbc0a209e803c75ebbbbfc99d6ff960b7bbc7924ed189c210660d2a021a1
-
SHA512
bbf3d7bc2e8e8df193ac8c5eb4104f10489f0fe59f643fd97a5d65d52824c6ce6c2db999ee29bdd669f089046b6d30b6f92d5072b9b705628a7fd0da9df23f15
-
SSDEEP
24576:zQtuNBMdy6pFujhoqEqFK2FvfhZRPPMpoY6HXY3Kusfexv4n6jVLx:zQjdy8FuqmzFhMpl6HuK9mxuQx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cf145f4b583f5197c6ad37e3b447bd2_JaffaCakes118
Files
-
8cf145f4b583f5197c6ad37e3b447bd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE