Behavioral task
behavioral1
Sample
ac8ed86a4b4bd30b67067052e34997fc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ac8ed86a4b4bd30b67067052e34997fc_JaffaCakes118
-
Size
897KB
-
MD5
ac8ed86a4b4bd30b67067052e34997fc
-
SHA1
19f7bcc935fb9c86a2790828ce46380b74163d7f
-
SHA256
a93ae4d0c6a05ff1916773a13eab145e3f8ae295ce6bd2e92aa75ef580c5c25f
-
SHA512
cfa9d73d06a60c346450c701e3bfb0d51f67cdf7973df598ae73db8f48768345286c47aa1d52a36064019b260b28c59007c02f445978f5955c5eb6ca669da52c
-
SSDEEP
24576:3iHHmVUQJrTryD+I1ooCOA07lnarXHTK6RwTS9t93BL:3OH13q0ELHTK6STS9D3BL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac8ed86a4b4bd30b67067052e34997fc_JaffaCakes118
Files
-
ac8ed86a4b4bd30b67067052e34997fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 630KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE