Behavioral task
behavioral1
Sample
ce97a11b9325adfe007e2bd2903ae068_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce97a11b9325adfe007e2bd2903ae068_JaffaCakes118
-
Size
1.2MB
-
MD5
ce97a11b9325adfe007e2bd2903ae068
-
SHA1
32ead92925bd6e42db028b52d10f38542dfa14f2
-
SHA256
3e653ca6a9d41a43bc885098a6b77be3feae5038329d6a05085fc38b0e7c65e9
-
SHA512
a778294489f713183809cd5c0f82b66e5d32f399e31c0b43fdc8da822b312ab851abffc02ee52df95fe7dd55d04428352ee06b0793af1673bc1f755670380754
-
SSDEEP
24576:8AInJXpdUKVVMLHRCf6wvHI7gWL0FSqAv7ESUizav2rBe:9it7MTRIJWL083Enrv2te
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce97a11b9325adfe007e2bd2903ae068_JaffaCakes118
Files
-
ce97a11b9325adfe007e2bd2903ae068_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE