Behavioral task
behavioral1
Sample
acc1741830262cf0420cbcd13166f8c5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
acc1741830262cf0420cbcd13166f8c5_JaffaCakes118
-
Size
2.1MB
-
MD5
acc1741830262cf0420cbcd13166f8c5
-
SHA1
2dcca05bbe576de95c922e0b04ec5f536d20fabb
-
SHA256
f56b2e0dad049930e3748e2f48f40598c593138b12bbbabc66d7ddcad396b1a1
-
SHA512
ce8be829435767d55149412816818251c7e0d3393fff882980f5db6421f67939a6e5ee5ce3b6c2004d124c99f0faffda18c08ba625b9938c7ccaa9e3ed0beef4
-
SSDEEP
49152:asmq5AOZT0Vjon8kEBCUNbfVvBAHWcWt0FHdol8xyeMc1:asmq5AOKVjo8DBX9Vvbci03oAh1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acc1741830262cf0420cbcd13166f8c5_JaffaCakes118
Files
-
acc1741830262cf0420cbcd13166f8c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE