Behavioral task
behavioral1
Sample
b4059c84ad7e082206954e911f5aef41_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b4059c84ad7e082206954e911f5aef41_JaffaCakes118
-
Size
1.2MB
-
MD5
b4059c84ad7e082206954e911f5aef41
-
SHA1
11ca05930c791a01a2b8d6e1efa2b6f394b6aeaa
-
SHA256
aa6ce6f8771f51084db8580268596d062fff8983742f6d3163c081d38dd3e54b
-
SHA512
3841ea5b0a0e70d68f0999644d494337bedeb45dbbc5e5fb3f2a610ff9f571729e1867c1db58b761320d577e703187896e4c8fba2646fe8bb27f2b6292bf2c7e
-
SSDEEP
24576:CTCaAUNLkQjae5WpIH8P5lz7YSo3QWLaaojs5wvIW8Rs:CTnIZz7Yj3dmadgss
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4059c84ad7e082206954e911f5aef41_JaffaCakes118
Files
-
b4059c84ad7e082206954e911f5aef41_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE