Behavioral task
behavioral1
Sample
b371e2ec44aed6bee5e1e2153b232c5f_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b371e2ec44aed6bee5e1e2153b232c5f_JaffaCakes118
-
Size
1.5MB
-
MD5
b371e2ec44aed6bee5e1e2153b232c5f
-
SHA1
4604fd8745bb9df7f967d7da258a925f0ea73e75
-
SHA256
c12a03d608615008896caf15db8b0b4a95856cfc53b9126a6582a7b4ecf73008
-
SHA512
35120810baffedaeee0f8447a072d0cc048cc86fd566299982e2cf7b02f4215a5b9cf40932d6b2aec6c1376f656f3594673a727f3ebc34d6c063b69a7e61e839
-
SSDEEP
24576:2gtzxyA65kT+o/NQzGFuzUWZMSWn/5TfdG4yVNEW8gsdorQwPPweMhRGh0xz/Cac:289f/9eNW/5Tfk4GHrbdkuaW1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b371e2ec44aed6bee5e1e2153b232c5f_JaffaCakes118
Files
-
b371e2ec44aed6bee5e1e2153b232c5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE