Behavioral task
behavioral1
Sample
b578ff003d99fbf5ed24bc17ac50425e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b578ff003d99fbf5ed24bc17ac50425e_JaffaCakes118
-
Size
8.8MB
-
MD5
b578ff003d99fbf5ed24bc17ac50425e
-
SHA1
05ddd66ad4cc68ffe36d8061467ba68b67609bd9
-
SHA256
b832497a2c36c16aa8cf5dd7c0e4e1c6138695dd1fd5a4b4d89b09d98bc4eb8d
-
SHA512
a1f68ff344454dc3f9b94e5f355d0fe0e0b63ee7e388564a9f6d640d0fd2eb43d4d44dfd1785593ce27ccc9cd5b67c272ecb9c44f011ea3c350326d98b38fbdd
-
SSDEEP
196608:hv1U0bFjDkLffj3kK9MRsndB0c6FvL0/lhp375RaJzdS:hG0R3k7j3xI+nt/VVo
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b578ff003d99fbf5ed24bc17ac50425e_JaffaCakes118
Files
-
b578ff003d99fbf5ed24bc17ac50425e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8.1MB - Virtual size: 17.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 703KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE