Behavioral task
behavioral1
Sample
ac58e9ae0dac3521b943cdf3844fbade_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ac58e9ae0dac3521b943cdf3844fbade_JaffaCakes118
-
Size
929KB
-
MD5
ac58e9ae0dac3521b943cdf3844fbade
-
SHA1
b8400bbdf36efaa903482299e5b6d544d8f94b2b
-
SHA256
b26e428bbe781508e486c81cef1229baa3c957c94b3fc950426ed067fec3783d
-
SHA512
110beb10b804cc501c1638768bd7236992e1da1212f74b371130a9fa46e2c80b41ac3f83b87322377c6b4d10ec699cf553db3bdb87e73eeca210e99a59d9c4de
-
SSDEEP
24576:uSFjRMV/IsuTvMRRbrWFNq87E2xkmqJEH8mta8:uSrCGc9rqNq872rHSV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac58e9ae0dac3521b943cdf3844fbade_JaffaCakes118
Files
-
ac58e9ae0dac3521b943cdf3844fbade_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 768KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE