Behavioral task
behavioral1
Sample
961216b5ccf32d9261e67ced0eb568eb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
961216b5ccf32d9261e67ced0eb568eb_JaffaCakes118
-
Size
498KB
-
MD5
961216b5ccf32d9261e67ced0eb568eb
-
SHA1
abd4e06eb79120b156e4b640ab1974c159ab0033
-
SHA256
e4bfcd46baa5cd99b5600ba1df90e59537e15b3f34eda343539443fe6eca46a4
-
SHA512
9d13f17f64fc39abf938b0920f66a0f51d3f8f5275653f0575c885cd1e6ccfa1e89f8730f2f6cc745edfc297d49ba019a4c3e27578042333b26b788ccf040723
-
SSDEEP
12288:vfDywUBkRd+JtAGbgjuCot7ArfKr90j+MNqsxh:HDywUBkR4fAGbgjZomFqpsxh
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961216b5ccf32d9261e67ced0eb568eb_JaffaCakes118
Files
-
961216b5ccf32d9261e67ced0eb568eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 125KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 369KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE