Behavioral task
behavioral1
Sample
d03aa4967ae87e269d75de339a18b0ff_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d03aa4967ae87e269d75de339a18b0ff_JaffaCakes118
-
Size
1.3MB
-
MD5
d03aa4967ae87e269d75de339a18b0ff
-
SHA1
aa0a9f8613fe2ea4d82c3a32d406e2f0f42f4c70
-
SHA256
c606295b643dd89bee7c71885da384f82e496493120e6ff59343a7f8c1339391
-
SHA512
539e78160b92deb0c729eeef7b3a8a5bbfc4d1528fa64572b0b81e4afc0ffdd36f97e71ccd247b9ad3c0551fdbbcfdfd35938383d285c10e68fc6218b0af4dc9
-
SSDEEP
24576:mM/nvwOzANcckFTCS1cUMmUmYo+6A6Zq1xp2RI1:hXwVczEm7dI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d03aa4967ae87e269d75de339a18b0ff_JaffaCakes118
Files
-
d03aa4967ae87e269d75de339a18b0ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 228KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 968KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE