Behavioral task
behavioral1
Sample
a32b369fb6b6065f1c3abb1f31648969_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a32b369fb6b6065f1c3abb1f31648969_JaffaCakes118
-
Size
4.1MB
-
MD5
a32b369fb6b6065f1c3abb1f31648969
-
SHA1
e1bcc1deac4cf85583305dbe1a2827d3c63296dc
-
SHA256
fb3324a031b5a05949aacd35a18b18c54cf825ee9778c7701ae9d33b1acc7d70
-
SHA512
279b47cc1e15aa072bab5601860a28d7185ef15af556adacbc9a8ba18c3308b8629a7329bba92f8d340a6493ab158fa07174887901afa0ffe49d63d263a3ef17
-
SSDEEP
98304:UlGA0aD6/ZYybVllzAULdtOFBiAIuifXlSf9Y443pyS72rd+:c3c3BlCiOjiAuPCM5yQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32b369fb6b6065f1c3abb1f31648969_JaffaCakes118
Files
-
a32b369fb6b6065f1c3abb1f31648969_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 435KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 601KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE