Behavioral task
behavioral1
Sample
14848fa9dc6064a160621064fbea0965_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
14848fa9dc6064a160621064fbea0965_JaffaCakes118
-
Size
1.4MB
-
MD5
14848fa9dc6064a160621064fbea0965
-
SHA1
a6db7f981b5908882fba4482c2c8f9c850ce0b73
-
SHA256
56272815eb525929d12d1c5793ba77694297526c3abb8c27f8d78c53b093d87f
-
SHA512
59f1a24e980ef89477b87a462f8a49ada34edb685ed67af2cea3689c6e59b58cb1f647b0518e2098ea3226ba7015fc4b2c6de11929a517941d71a215b58daba2
-
SSDEEP
24576:3cLG+VFZBcl2qD6T+j1a9xCp4ug42OwBVSD3h58hIM4+3h/kuZmtUt/3145:3cLGoFZBTca9xHr422Djo1x/Qi/1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14848fa9dc6064a160621064fbea0965_JaffaCakes118
Files
-
14848fa9dc6064a160621064fbea0965_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 618KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE