Behavioral task
behavioral1
Sample
d280295c069704402174a5677938f4a6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d280295c069704402174a5677938f4a6_JaffaCakes118
-
Size
727KB
-
MD5
d280295c069704402174a5677938f4a6
-
SHA1
d259f6f0d5191efc14e286c294f161c6ec503dd7
-
SHA256
aaa0314c3098b1f7c5dabcad1a26be0dd8c12d9bf90c602679f3143b8eec2c61
-
SHA512
04f640d4c8f2927f39b3999d8ad9ea53ec6928fb25f7c38903959a9314ea35155e2e7047d31f5a36b7675223423eba288442776a5ed757a889bf11c99b7e09b0
-
SSDEEP
12288:OqPajSNCZkAwSWv4l0kbhqv8NzXrQfHlkyZUtQ63kxrrrrPqzmJR+4iuO9k1:S67AwSWv4+Whq0NzXr4zOt73kxrrrrPx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d280295c069704402174a5677938f4a6_JaffaCakes118
Files
-
d280295c069704402174a5677938f4a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 674KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE