Behavioral task
behavioral1
Sample
d3b656a358e1746710bab3d96fe79399_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d3b656a358e1746710bab3d96fe79399_JaffaCakes118
-
Size
1.4MB
-
MD5
d3b656a358e1746710bab3d96fe79399
-
SHA1
8408297b02ffe389d0d4838db5621fe1060da482
-
SHA256
e5d06dae67f7ea1f7538e879b133691fe65bbb6e98347ef72f90c48dfb15cee1
-
SHA512
19727b9a244d701ae1d9d55f639fe9b544b9be46f140d0c84a149abe0ea6d9815257ea6e8cb62b642a72fd3e07b9627de8800a7c612104c6fcd08bd9f4348336
-
SSDEEP
24576:VWFZqKyoNx/Mi6E4XqgFZNIvWQQjAaIuJ+i6JiP53PkwJsMitysqi0GwM0u950Nm:VpKtNNMVfaghqW1Nr6JiPiWityDd40uR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3b656a358e1746710bab3d96fe79399_JaffaCakes118
Files
-
d3b656a358e1746710bab3d96fe79399_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 43KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE