Behavioral task
behavioral1
Sample
947b0d820bac8e2e888b6aa9ade97ea6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
947b0d820bac8e2e888b6aa9ade97ea6_JaffaCakes118
-
Size
691KB
-
MD5
947b0d820bac8e2e888b6aa9ade97ea6
-
SHA1
840d26b65ee423b774c2ac02be3e5097a612f8e9
-
SHA256
48031aa32e442c703e6d0cf702eba4e9ddbadc84fb54509a7ce7c00968288c49
-
SHA512
9f7a85a6d9e0804704c9da5bba2b44e70723a55e01dbebe20ffe5d05efe0804505ccdb45e90bf34ee0eef0455018788280e52939abff2ad450a88c4e7a97e89f
-
SSDEEP
12288:IsDLZ6bEqOq6f9bR2SZLWYzQFyNGXAzIj4oAVtJqGmojQAENz1v6rjvaySVojVUu:Is/Z6bEqMflR2SRXzKaGVj4oAbnmTAE6
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 947b0d820bac8e2e888b6aa9ade97ea6_JaffaCakes118
Files
-
947b0d820bac8e2e888b6aa9ade97ea6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 633KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE