Behavioral task
behavioral1
Sample
bd65d704cdc6e32adc3552078d640e91_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bd65d704cdc6e32adc3552078d640e91_JaffaCakes118
-
Size
1.6MB
-
MD5
bd65d704cdc6e32adc3552078d640e91
-
SHA1
30e087d3397f7f257c793a9cf896320edc32bac1
-
SHA256
752acb6f9c2b98ab6f7c1681234047420bf3031a617a3ae2e119fa354896dbdd
-
SHA512
9f1024eaab4cfe116c07a543008062e58378634b03aa9c116335613391d6bbe03642b098f19ca463fb610738978cae64854d2e8f51f828c4858b1e179a7bf92e
-
SSDEEP
49152:ZRUrdc9FspCcQQggNUs+6W7xtO+n4BkT:ZiIRcNUsC73OIV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd65d704cdc6e32adc3552078d640e91_JaffaCakes118
Files
-
bd65d704cdc6e32adc3552078d640e91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 417KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE