Behavioral task
behavioral1
Sample
b6772ef91f95fd775e8414757e54d222_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b6772ef91f95fd775e8414757e54d222_JaffaCakes118
-
Size
1.1MB
-
MD5
b6772ef91f95fd775e8414757e54d222
-
SHA1
0c93dad6201928da9a19b61943596f57d3803771
-
SHA256
510716661e3ec3101d6d2fc99a6c8d7b4ab59b72fe8cb9712eb658514a794277
-
SHA512
97f692e3ac51bc26ccc9e12b9caaf7befea7353adbf2858969dc8f06145e5914996f05e65e5d21eda36d7f59dd72c006c26e3fc02c8fda12f7f25465364d7d01
-
SSDEEP
24576:GXVzWBsxrmBcXNfOi3m/Y9RL2/ZsXdgNCQeZhkeGcg:GXCAmDZWP2cg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6772ef91f95fd775e8414757e54d222_JaffaCakes118
Files
-
b6772ef91f95fd775e8414757e54d222_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 251KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 825KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE