Behavioral task
behavioral1
Sample
f625c366bacacba0714dea396af142eb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f625c366bacacba0714dea396af142eb_JaffaCakes118
-
Size
1.1MB
-
MD5
f625c366bacacba0714dea396af142eb
-
SHA1
70fc2cd1b473c16e88c6aa31a9112032a07cfc59
-
SHA256
0ef834e2c81330a7adf99d666a354e277ebd9740d29b342eef7a3f9f60bc2a5a
-
SHA512
3c2a3cc9827ca17f516fdef226014ec91f496ba7abccb2be29b10bb130eb73e759c0c5e932ef91d2ff4de95049ba0b2a5f98a3af62dc5e2f7a96f15acdce475e
-
SSDEEP
24576:55kSfGgy6dPkaoOPYoIa2zlbmAa/s2DNmXqYdchgaZL+gy35T5n7KMLDn58:51+lbBvzlK/TGFdc/ZrypTRKMHn58
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f625c366bacacba0714dea396af142eb_JaffaCakes118
Files
-
f625c366bacacba0714dea396af142eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 588KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE