Behavioral task
behavioral1
Sample
b20bcb7a16bbc9eba19499263f2d008d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b20bcb7a16bbc9eba19499263f2d008d_JaffaCakes118
-
Size
2.1MB
-
MD5
b20bcb7a16bbc9eba19499263f2d008d
-
SHA1
1fec3a1ab6731fcfb32eef333664ae687005a748
-
SHA256
fe123fb5731708c0feb994c820b6560ba5615e22386e8ea79a79a8f2a2586277
-
SHA512
1204a4feca651d2073e675af09bab6f7cc6d424b1134981a7a082e7ad8005499e7eac05336061b35267a8dec5e76a6b349a4f69c9321b4d29b3528e90cdd0169
-
SSDEEP
49152:iZ63d/bVK5rR4IbHh0vH1pAUlBNYzT1ec5n4J3zpsbQtYKp:H3h52rf6koBKL4J3zp08
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b20bcb7a16bbc9eba19499263f2d008d_JaffaCakes118
Files
-
b20bcb7a16bbc9eba19499263f2d008d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE