Behavioral task
behavioral1
Sample
b7e36b8d8c294e073513090b85079e73_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b7e36b8d8c294e073513090b85079e73_JaffaCakes118
-
Size
534KB
-
MD5
b7e36b8d8c294e073513090b85079e73
-
SHA1
9ee4e67b8ca44d85cc37d9f93fcbbf21f622d358
-
SHA256
079dc88072fbac3ad887d21db109df56e6fc2950de6f47b683ea3bc40444b511
-
SHA512
67e8a4a83c6fb0e446cf8f52cf9a6016d0627be28d779b9861b2b163e2b14e2c1f17b2708d5c1d429447800c11b1209dfc26944ed67fd1b68acde8ecadb61ac4
-
SSDEEP
12288:FTaeB3hEZU017CY3RjdQtS0EZxT6lhYj+NsBNRUz2CnXVi:FTbuZUCx3Rj+tTEZxTANpHnXM
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7e36b8d8c294e073513090b85079e73_JaffaCakes118
Files
-
b7e36b8d8c294e073513090b85079e73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 494KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE