Behavioral task
behavioral1
Sample
c85fb24edd1e2be00b253694f064517e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
c85fb24edd1e2be00b253694f064517e_JaffaCakes118
-
Size
1.5MB
-
MD5
c85fb24edd1e2be00b253694f064517e
-
SHA1
db875ea05be399c29209781f8fec0132fd2fdc6c
-
SHA256
711714ec5085a9b40c944ec5bdd3f7e3d2bb2ee5bafab2a934c489ddc982d4d5
-
SHA512
df73ae742d565b5102f08e6b931799561b67cc0c35f539dd0c767ac992abfa065d8d0f51e73666f9be7ca02a4212fe5ba375295560c6df10044958cfcf28c360
-
SSDEEP
24576:4Y/GTaUlIyWjGANp93vowqc3FfpCac3QYNqI34I5dw9QdD2fB5CQ:N/GdIfGANp93zvFGHg9QdD27
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c85fb24edd1e2be00b253694f064517e_JaffaCakes118
Files
-
c85fb24edd1e2be00b253694f064517e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE