Behavioral task
behavioral1
Sample
c28e6e9b85fb2dfc2d40edcb555b674f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c28e6e9b85fb2dfc2d40edcb555b674f_JaffaCakes118
-
Size
1.1MB
-
MD5
c28e6e9b85fb2dfc2d40edcb555b674f
-
SHA1
b46073343ddaaf5642600c34f7ee023bcb0f0d45
-
SHA256
e4c7acde8eeb5c54bd1ea38e176898807a752ed4b450d2985b61876255d42f97
-
SHA512
ea56da7958d5ac438d30d3e508526f893fa093ea9aa2c361afbaf8ce6102d6aeea5436b9559e4ef2eb9205079db62cbfeadac9f0741922582696d22672f649b4
-
SSDEEP
24576:schOpw9sBJd9MFj4Ez3LwjjNdaOqAUdToOiI2MVHxtV1:JwZBJd9mMEz3LwjjN2AOVRP1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c28e6e9b85fb2dfc2d40edcb555b674f_JaffaCakes118
Files
-
c28e6e9b85fb2dfc2d40edcb555b674f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE