Behavioral task
behavioral1
Sample
958696db34f63219fc9345a0f74f62ae_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
958696db34f63219fc9345a0f74f62ae_JaffaCakes118
-
Size
1.5MB
-
MD5
958696db34f63219fc9345a0f74f62ae
-
SHA1
d461e9d74a17327b5ece1f4a763ca144d59145e0
-
SHA256
7252a6dccc6185eab3da2db31e7db995c5dd1fd1950720a57fec026f635b55bf
-
SHA512
22c5179249e91522021bc908b7ccfb87ca1190c250020851e9ca5dfdc0f6e0a164a641de62f6bd59df869d9342c695f97fb9eb308740afee75d8ad4f1226da5e
-
SSDEEP
24576:2gtzxyA65kT+o/NQzGFuzUWZMSWn/5TfdG4yVNEW8gsdorQwPPweMhRGh0xz/Caj:289f/9eNW/5Tfk4GHrbdkuaWA
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 958696db34f63219fc9345a0f74f62ae_JaffaCakes118
Files
-
958696db34f63219fc9345a0f74f62ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE