Behavioral task
behavioral1
Sample
94d280929bb0b75a7a4448825da9d35c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94d280929bb0b75a7a4448825da9d35c_JaffaCakes118
-
Size
1.5MB
-
MD5
94d280929bb0b75a7a4448825da9d35c
-
SHA1
992f4c70cdf5a3f547c3196e30105847f025419e
-
SHA256
4e43c17df4f17f6f73eb9bb8a88ad5407427c7b2435096cd549ab30a221911b0
-
SHA512
dad7b5d26b698c623b724c6037b0e72f0a4acd5e2b6b162a9a665a0f6a09baa8ef10ff45c2e73206859ba5b6386a5488680179f991b7ce276b065eeb6572f3be
-
SSDEEP
24576:g2cqpL5XB82/nHJq77Wpybtgp+pjcn6+ka2MH7LYf7CoAA:dBhH43WpyjQ6+kufYf78
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94d280929bb0b75a7a4448825da9d35c_JaffaCakes118
Files
-
94d280929bb0b75a7a4448825da9d35c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 276KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 695KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 937KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE