Behavioral task
behavioral1
Sample
b636155cee9b6d9659b34060add3cbaf_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b636155cee9b6d9659b34060add3cbaf_JaffaCakes118
-
Size
674KB
-
MD5
b636155cee9b6d9659b34060add3cbaf
-
SHA1
4a04238a3cc62c143f82414268abaa39046bb034
-
SHA256
4689f12313965485828099740271d56d3a4b29a8dac1d5996bc7a4aff2f2051d
-
SHA512
8df400ced98bfe0c98550b7916210d6a84a3feead802b05840652352ab406e855650f59bd585423fa5a2c53d22e5cdc40cc734daeef64a200e8006705fc63fe1
-
SSDEEP
12288:Cme8qMBo1q7IEnTaBGPFxLPdueT1p1Cg0OGzWZy2SRiGjfydBnfzHtdofbAatO8:Z/U1M1TCIFxDT1TCg09TUQyd9NeDBz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b636155cee9b6d9659b34060add3cbaf_JaffaCakes118
Files
-
b636155cee9b6d9659b34060add3cbaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 536KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE