Behavioral task
behavioral1
Sample
b7459d9fcdf2498913e0ec6d466a7063_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b7459d9fcdf2498913e0ec6d466a7063_JaffaCakes118
-
Size
5.3MB
-
MD5
b7459d9fcdf2498913e0ec6d466a7063
-
SHA1
3e1c1fd6077eb99d9c3fec9408e6b347b042d822
-
SHA256
c8e660ac14e6a022908b436eeb3fbf47deff0135de88b849cd8bf8852a2072c0
-
SHA512
22ea4b5b8e5b65fdf50338155462c75e8c400a782a04b2465c37f3af16e76eca71349448c9c62c5a569e4dc28aecbc1f340b69e96f6bd8a978d69f58ef7a3b1c
-
SSDEEP
98304:FYOBJPU8jKJOp+QsW8SAPmWriMvpwDyoBMP1SHQsKsvf7t:SeU8eUIQsyAmpC61GqQhs
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7459d9fcdf2498913e0ec6d466a7063_JaffaCakes118
Files
-
b7459d9fcdf2498913e0ec6d466a7063_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 434KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE