Behavioral task
behavioral1
Sample
ce90dd654b599421f98943390caabbbf_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ce90dd654b599421f98943390caabbbf_JaffaCakes118
-
Size
1.4MB
-
MD5
ce90dd654b599421f98943390caabbbf
-
SHA1
26dbacddcca015a5077ecf8acca01a9db91db7f5
-
SHA256
00a18d5cfc34f94525f7b479271040bd37e32cbde8a1d957fcf3e711a2a98c18
-
SHA512
bd194be9e658fe921c4f6c68e40bf538bdc5c2e94615b1ce9f58cca92020f04859b48973a93f73a68dc218dce368697f9eedf082eaa0a8ecb1fe0f3267bd3041
-
SSDEEP
24576:ZNASWwL5kTxlQzKUySgjfWuByHf+7cTBcMI3Oe0pWoe82CX1FSLU5tpI99L:ZaUGFlQTy7rYHf6k+33/0pWoe6XSbx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce90dd654b599421f98943390caabbbf_JaffaCakes118
Files
-
ce90dd654b599421f98943390caabbbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE