Behavioral task
behavioral1
Sample
ced571cada4160502523594cc04c0b31_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ced571cada4160502523594cc04c0b31_JaffaCakes118
-
Size
695KB
-
MD5
ced571cada4160502523594cc04c0b31
-
SHA1
41428e75c6b5067e5cfed0df697a29124fbf744f
-
SHA256
d36d56979e5dd514a78d72c70ca79295c0228c6897462a1dbb10eac4dba82c6a
-
SHA512
efa68e7e6f007bd0d477e5a59344bbcce094126112b1bc0be96aa1255a3d8cfcd5025862fcc509ff7e4e0aae337ce5c0c7ca23721f425569193c8d372b21436e
-
SSDEEP
12288:NVIOW4ioR3hbNk1QJJ4zMHvHrFeaTbFdiGrZlUfXtjl6KZOQAMcF4r5WPiZc8U:TM4iQNN/H44HPheyi0lU1jl62RtGirU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced571cada4160502523594cc04c0b31_JaffaCakes118
Files
-
ced571cada4160502523594cc04c0b31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 664KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE