Behavioral task
behavioral1
Sample
a6a200161d4a3709c558fb71955c1153_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a6a200161d4a3709c558fb71955c1153_JaffaCakes118
-
Size
1.8MB
-
MD5
a6a200161d4a3709c558fb71955c1153
-
SHA1
4ae877491e17b44fd326411154f08905786e44fe
-
SHA256
c8a4a412118b4ee5eea0a0ad8c006cf18bc63c598ab14a5538fd8f77cba34835
-
SHA512
3c6d286959bb853c8fe89186347cce4c68a847852ea4bc6ca9d8a73e653bbdde154b7e3e8383a2863219c80ae9a093a61a7772f4ddd800ed6dc86c1277758e84
-
SSDEEP
24576:wPp98keGda4J0yqgX2wVnWvQCdsszUKODHB3IcUuvfQYEnev2kX4iebivW8GLDhK:wP7HeG3ShOmODdI5+rdv20KbkWSoc
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6a200161d4a3709c558fb71955c1153_JaffaCakes118
Files
-
a6a200161d4a3709c558fb71955c1153_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 621KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 713KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE