Behavioral task
behavioral1
Sample
beb78ccd396e7ec44dbdcc3f981d3edc_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
beb78ccd396e7ec44dbdcc3f981d3edc_JaffaCakes118
-
Size
1.2MB
-
MD5
beb78ccd396e7ec44dbdcc3f981d3edc
-
SHA1
038967b814bf6669624fc16d3e5d3afa35d31887
-
SHA256
aee2c4a98d059154b2ef9754ce983cdc7ad6d648d64974cecb30f7fce8c1a6d0
-
SHA512
a493f2c299c347d45b1e9c7e41042af7196f7f726c6ce696920d66f74d06b52cf7f179ac49f4fba28acfbd8dc4b8b59f5ccbf00d168ea2c0a8b431e683db8321
-
SSDEEP
24576:BmrcKn0nTfPpmUTauLqANNKoksVRGvnCg+la+rdpmCFdTy:UcK0nTfPkQauLqANNKimvCg4dG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beb78ccd396e7ec44dbdcc3f981d3edc_JaffaCakes118
Files
-
beb78ccd396e7ec44dbdcc3f981d3edc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE