Behavioral task
behavioral1
Sample
b7195466a4a3860e71399f6804090d50_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b7195466a4a3860e71399f6804090d50_JaffaCakes118
-
Size
879KB
-
MD5
b7195466a4a3860e71399f6804090d50
-
SHA1
005427383060f5d5c80b5877c3e68182b2db82a0
-
SHA256
14167b5efa544c45ff51324ee73c022280cfc35b46611cd3c964bc4a3408ef21
-
SHA512
a82e6f89199a6d09fb03e85d3d9437e9578562ae3e498996e011a9b2abcd10ac90a6146165907912e728cf9406e551ec34ba38d63d3702fb18f0da1a92b92938
-
SSDEEP
24576:TZfzi/svhJa4bLafgmwZL/QIKG1oEvztgP3+n1gI8yA1r:Bi/sv7bLMgm6roct23Awr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7195466a4a3860e71399f6804090d50_JaffaCakes118
Files
-
b7195466a4a3860e71399f6804090d50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 819KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE