Behavioral task
behavioral1
Sample
b27314f7ab417927a08e0dacea07ad85_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b27314f7ab417927a08e0dacea07ad85_JaffaCakes118
-
Size
1.3MB
-
MD5
b27314f7ab417927a08e0dacea07ad85
-
SHA1
5f52608fb8c606e241e3cf87e1171c5e398d8a6c
-
SHA256
919b8919e749df28169d355b7cb1944243139c1caaecfa19468d4788776fb37b
-
SHA512
053da146578e8071c9b00018732c6740904e2f0564401b6bd092615b1828a266a1183247313f5b17401fcd808515cd90d876d34c180945b41ea86b525ae69af6
-
SSDEEP
24576:qso2i2BI3y0JK0A+EwR6KyG7g8kji/q4Lu5/YAEJPB7wGvt1ISN3:6eX0tKy7TLumA4Z7wQ1Ia3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b27314f7ab417927a08e0dacea07ad85_JaffaCakes118
Files
-
b27314f7ab417927a08e0dacea07ad85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE