Behavioral task
behavioral1
Sample
c94fe652adfb9c32edb03673d95fa50b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c94fe652adfb9c32edb03673d95fa50b_JaffaCakes118
-
Size
1.4MB
-
MD5
c94fe652adfb9c32edb03673d95fa50b
-
SHA1
424e85997c81045b946f5025e80167ebca2b557f
-
SHA256
3973fd84ab768f4d8f98d6cb18377f19cc5cbe48ef5571b947b2ced026a223c1
-
SHA512
20c880a87fbc8abfcdf65383bc42728f3f35b884334b30c8c108cfb5c7778266c3597cbef66bc04c5903b30f0deab35c7a64b4aed6e044d0e4ae80333a96a024
-
SSDEEP
24576:/p8Q33DGArKZcwtHGBXDSpuIaAhWdu6EPvd3LF/3Evb6mSu0AlZ0jXklZ:/p8WzRKZa05eQPF3pQTSUXl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c94fe652adfb9c32edb03673d95fa50b_JaffaCakes118
Files
-
c94fe652adfb9c32edb03673d95fa50b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE