Behavioral task
behavioral1
Sample
c8bae954453e7c679621fde3366f7e8b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c8bae954453e7c679621fde3366f7e8b_JaffaCakes118
-
Size
1.1MB
-
MD5
c8bae954453e7c679621fde3366f7e8b
-
SHA1
a4d369173e0dba64bb1222f5af113b43caa78b68
-
SHA256
8198b47c3391b2c29c53cfce813089a274c270302003134883d51177e2f4b94b
-
SHA512
d3aa52fe2b2863b90245f03697040e863d14311df98d570f3b80759b2eb28096a5695296fec0b0f70a7a859812434bc659f6320233360c30ea9c23bfbc830215
-
SSDEEP
24576:LVJsW4K/n0xqI53tAq//pqMzC+PL60UbZ6+HROwLW7IXA9UbmUfe:LVJsW4TxhYqJQv6+Hd4HUfe
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8bae954453e7c679621fde3366f7e8b_JaffaCakes118
Files
-
c8bae954453e7c679621fde3366f7e8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 724KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE