Behavioral task
behavioral1
Sample
b47eb28359b38b0348250285ec187ec7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b47eb28359b38b0348250285ec187ec7_JaffaCakes118
-
Size
7.5MB
-
MD5
b47eb28359b38b0348250285ec187ec7
-
SHA1
7177163c3b1e425929b23779bf2f84c9b1ff78f0
-
SHA256
1b08dec9b7b0c16e60ee30294fcbc075055ca9c1901576d58ca67b5b55c3d2c1
-
SHA512
105823d15e2f156cc795dffada0a23f44e78dae94990c33ca606196d5d1a26c33137368bc0bc3780d1d7bfcfc4da9c248c056d18b582fa0c229e6a001d3b1015
-
SSDEEP
98304:/E+y0F1IcpSVTCZ0kaw8Vw5SobWJYpgqBnQbf4Du3blJUraF2k1ywDgWESrTO:/ETCIco9CNp86U1Y/0fYurDBkJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b47eb28359b38b0348250285ec187ec7_JaffaCakes118
Files
-
b47eb28359b38b0348250285ec187ec7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 572KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE