Behavioral task
behavioral1
Sample
dd6213245e4efc4937de67e5f806e2c1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dd6213245e4efc4937de67e5f806e2c1_JaffaCakes118
-
Size
1.0MB
-
MD5
dd6213245e4efc4937de67e5f806e2c1
-
SHA1
b9c8ed0d790c4403c5ce95584c1eb2f3ccaf59e0
-
SHA256
7b04427141e3fb2c11321e6e12a865b8f5c687727d387afad608fd4f2c12f0bc
-
SHA512
3259e70cd6165f0260500f73b25dae9a6c760236e919d34d7651488b75a4294510e621de6c957e9e7ffea85cd4f1e3eaf84b758ca289543092c8b0df88d16d1a
-
SSDEEP
24576:pTUd5OYL7FYzBWRuXFbpdd/YQa61raxIvLw72oij2:p4d5h3FCIYFJMmvL0
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6213245e4efc4937de67e5f806e2c1_JaffaCakes118
Files
-
dd6213245e4efc4937de67e5f806e2c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 405KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 642KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE