Behavioral task
behavioral1
Sample
291736f80f861604dab75cef454e6ecf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
291736f80f861604dab75cef454e6ecf_JaffaCakes118
-
Size
2.6MB
-
MD5
291736f80f861604dab75cef454e6ecf
-
SHA1
be1277ee89c6b3bc4b60c654c72dca335e84d909
-
SHA256
618b03033114915ca2af96d5b148838d69783ec08397eaf275d64b2d766376d1
-
SHA512
988fcfa7754bf52efa669a22c0696da4ed8409f4e9f3464142ffb772f805e3920983874c9236a4f9831c68ec4c40c91efe81b8dcd98b7381c44378c8bf7d2fe3
-
SSDEEP
49152:4cgvHtziP+e6U85tZe8+SMvJi5cy0Egp//b8Une0kFB8sfNdV4UoQDZ:4cgvNWP+e61LZ5+AyE4Jne0YKMURyZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 291736f80f861604dab75cef454e6ecf_JaffaCakes118
Files
-
291736f80f861604dab75cef454e6ecf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 460KB - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE