Behavioral task
behavioral1
Sample
ead9703cc719b00e130f08ed30cd6980_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ead9703cc719b00e130f08ed30cd6980_JaffaCakes118
-
Size
4.0MB
-
MD5
ead9703cc719b00e130f08ed30cd6980
-
SHA1
eefde34b97f8e032dde0d5342b36fd3aa3792cd3
-
SHA256
af1c5b5f278c9ee5c3a48e2dc11546b3f25f327f9b1726aaa060fd656be48aab
-
SHA512
f4a3d31b4bffa7bac3eb2fb72a822a23670019b4fcf56e5abed035eed07a3576dc8ff0e1b2bfcbf055c710f111b9b341e5dc5c12e712fb106e873699e45f2d52
-
SSDEEP
98304:Gk68VWDOyhfKPgqBHriaIkA5SqH+X2RXJBPmID:568VWDOyhfJqBHhIkGSE+X2R5Bh
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead9703cc719b00e130f08ed30cd6980_JaffaCakes118
Files
-
ead9703cc719b00e130f08ed30cd6980_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 648KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE