Behavioral task
behavioral1
Sample
af899c785509ff1b43152b0b264968da_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
af899c785509ff1b43152b0b264968da_JaffaCakes118
-
Size
903KB
-
MD5
af899c785509ff1b43152b0b264968da
-
SHA1
03d3b6548c58755be9d38030bc9bb231e50fffda
-
SHA256
1c9ffb8d3c867c7af17b0b207207b36870c8838ebb33a0af9d5f60b7c1b2b467
-
SHA512
6aa9447304cae93ef72109cff4b1db604abc63f394c7650bdb15008a06bfc7fcfc9f42c090e2a8d82386a3f07515361630677c18e42b72398469ae855d63598b
-
SSDEEP
24576:VhVyqUEn3Y9VVlMJ+bY2saOsHsFnQ1T4hQUj:nUeY9Ple+k2sYH/HU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af899c785509ff1b43152b0b264968da_JaffaCakes118
Files
-
af899c785509ff1b43152b0b264968da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 286KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 604KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE