Behavioral task
behavioral1
Sample
d70ffa9f60f13694609e230dcfb6a127_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d70ffa9f60f13694609e230dcfb6a127_JaffaCakes118
-
Size
1.6MB
-
MD5
d70ffa9f60f13694609e230dcfb6a127
-
SHA1
aec840f2ae03e2ae907ffa26b10afe27f2883607
-
SHA256
4fdbbb0595a4ac93b4d1fc8f2e0b5a221f143ae299a7d466425d5bcf86e3ff83
-
SHA512
e235645c73825f37f599967d0e9efa555e38bd4d245f16ae7b8b343730e08dedd7c7d33fadcf2a04d04af0fd13b9dc9c1c7b31c4e6744d3e21b5e1744e8efd22
-
SSDEEP
49152:MTDqJgao/nQRwby91k34QGY2hh5tDovx0f:qqJgaovJbyfk3j65oCf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70ffa9f60f13694609e230dcfb6a127_JaffaCakes118
Files
-
d70ffa9f60f13694609e230dcfb6a127_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE