Behavioral task
behavioral1
Sample
ad995e4c117f87db47ec1a3182f83dff_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ad995e4c117f87db47ec1a3182f83dff_JaffaCakes118
-
Size
638KB
-
MD5
ad995e4c117f87db47ec1a3182f83dff
-
SHA1
df93b13b763c2ac6fb2c4f1b2df2e7f85dcf0ce4
-
SHA256
c751091e04d6419ecb87e98cc0cad18b95fdec4c4a347fb7c1718545a83b8920
-
SHA512
982adb77c456967087305296d73352b35393c915723372c83f536876ef1f9eecf076da578a8bae842f61840631900d1f3c6179adab7f26e1c18220500442b615
-
SSDEEP
12288:uowPlhFNPsjQT5xeQSt9PRBVyXfS28MPUEFA4PuCS27mn9J7B04Ulru7tzNk:uLPlLi0T5XSt9P1yvS2sEFA4PuCS27mY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad995e4c117f87db47ec1a3182f83dff_JaffaCakes118
Files
-
ad995e4c117f87db47ec1a3182f83dff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 604KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE