Behavioral task
behavioral1
Sample
b37120f767f89b21c7a8a55bc4e69065_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b37120f767f89b21c7a8a55bc4e69065_JaffaCakes118
-
Size
1.2MB
-
MD5
b37120f767f89b21c7a8a55bc4e69065
-
SHA1
903e53ace4332c8fef2e95120f69cf926f7d03fa
-
SHA256
a2c86f5500e14e808993b0c147a18dc2053f7b5d4cd08bea3dd96ee05861f7ed
-
SHA512
29ceb24e22ab4e7f9b3f7fe91798a4d76f756eebeced32b775e2350a2f6540373d6da8914b94467d87b7a7030bb97906c6b3da068ffd816bfd0a96e82eb8c02a
-
SSDEEP
24576:gGVhPDYr3Tzme2IliNLRP+06Jkw2JxQDpUGuEQWPEQhfnQ3bn:ZVh7YrD6eli/6dBQWPE8fnQ3r
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b37120f767f89b21c7a8a55bc4e69065_JaffaCakes118
Files
-
b37120f767f89b21c7a8a55bc4e69065_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 628KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE