Behavioral task
behavioral1
Sample
d33650d7fc2fa8eb571b4bd0e8c7e7d0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d33650d7fc2fa8eb571b4bd0e8c7e7d0_JaffaCakes118
-
Size
1.4MB
-
MD5
d33650d7fc2fa8eb571b4bd0e8c7e7d0
-
SHA1
70fa2e3ad1b02d6e838637e5bcacedbe32a82375
-
SHA256
4c9474b107aba88632e46fd79d37a561927c5a01c2583b0245db57bc72038261
-
SHA512
16cbbe90bf84678a1b7c5301f6a869a81935bc5494523311850b0fa12da40d5df6aeee8d9af4f5d21911c20a29ef1e1f425e4a496f7f47c51b2beb10e2cbdd48
-
SSDEEP
24576:4gc6H6J6gBPaOFfVGcLXzjlLBgp803owAcOiKpy7yzRBPc6dPCH4dG:4RYbeFf0cDlVgFQiKpy2zRB0BYdG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d33650d7fc2fa8eb571b4bd0e8c7e7d0_JaffaCakes118
Files
-
d33650d7fc2fa8eb571b4bd0e8c7e7d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 107KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE