Behavioral task
behavioral1
Sample
dd8d0f94d5db605d4709b0d488ed3980_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd8d0f94d5db605d4709b0d488ed3980_JaffaCakes118
-
Size
629KB
-
MD5
dd8d0f94d5db605d4709b0d488ed3980
-
SHA1
23204171fd6a7d41953d1ebb80dac30cc5f3b842
-
SHA256
9c19e367093ec36e44c624de831d561fa005fd70f0fe7455869668fcf5c217d5
-
SHA512
40ae98488fd106ec8f41bb90e9b806a35edb1b3cfb647916e59169f5e3f8c38da553b483e4a0bdc5784e06b4a939f166ace0d34e981506db0d3323b0fd2227e8
-
SSDEEP
12288:6QDuHENG3JaNhwA2YXC2uxwnRg9r7yY4cl28h8OnKQ/y+:6cN4JavVUkuFp28JnKN+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd8d0f94d5db605d4709b0d488ed3980_JaffaCakes118
Files
-
dd8d0f94d5db605d4709b0d488ed3980_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 131KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 493KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 60B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ