Behavioral task
behavioral1
Sample
dba0441232181f115e67c1752a9a1843_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dba0441232181f115e67c1752a9a1843_JaffaCakes118
-
Size
4.6MB
-
MD5
dba0441232181f115e67c1752a9a1843
-
SHA1
7f2c95626fc9a235ff3b106eea60282c58fac3c5
-
SHA256
f227911d981cf0240427b241044f6b4400877a7d33606174a6ca989eee04cce6
-
SHA512
63f2bb47a79ebfeb82d9db5416fe3e4159d6733f25e5a9f41f566f0fbe103f935f1c763c289f3a933586707d87f5024946a0f152fd089c39862cd959d737a6b6
-
SSDEEP
98304:xnin2rquLKnUhhi7oIAkVNw9JVE1luutoczTodCFDYW20QYSbe/a:xFrZLK0slNAHaAYoEYW2Sm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dba0441232181f115e67c1752a9a1843_JaffaCakes118
Files
-
dba0441232181f115e67c1752a9a1843_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 391KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.6MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 641KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE