Behavioral task
behavioral1
Sample
a678fd7f51c5f2a2fae2a575b661c210_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a678fd7f51c5f2a2fae2a575b661c210_JaffaCakes118
-
Size
903KB
-
MD5
a678fd7f51c5f2a2fae2a575b661c210
-
SHA1
f1dfec68efc2fa5e955644ed315764e8e98cdc67
-
SHA256
073fc2f2b509c3fe9ffe6dad4f27a8697009e46fb4cf2d71693606144a4d9a9f
-
SHA512
9a5b1e950de8928316a1dae3b7915899b589b1c15824e6e5c14b64db21f7f395e14ea8335d51ea35a0e8ca65e0468b4dd2e8e8867f8df97389f67d75c0cc9405
-
SSDEEP
24576:UBtlmkEmwQkJgt7DsUNcr4BKw4TZzhKJDy5MkYYy:mkkEbQkJ4q4oLKOMMy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a678fd7f51c5f2a2fae2a575b661c210_JaffaCakes118
Files
-
a678fd7f51c5f2a2fae2a575b661c210_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 612KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE