Behavioral task
behavioral1
Sample
JaffaCakes118_f5e18446e95d13433bb0dc7b7965ab21cc1d884bc754424c1dcd2ea48f57f419.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_f5e18446e95d13433bb0dc7b7965ab21cc1d884bc754424c1dcd2ea48f57f419
-
Size
781.0MB
-
MD5
68e781523950bf814b9f274a3894783f
-
SHA1
627db70d427864cc598cbb0cc0642c5113260a11
-
SHA256
f5e18446e95d13433bb0dc7b7965ab21cc1d884bc754424c1dcd2ea48f57f419
-
SHA512
eda6b468f08f60bda2dd5bac93364a43c3ce604a0a12a8084ecdc1e01076418b035359ae440b38703cb0bc11be358d46bb6e54c208d2fe61a18d7931f49c9000
-
SSDEEP
196608:j7z7bJtJ/GgR0tc0A9rY3mq700agl/4H0WH8:/B/3gc5VYnragl4HF
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_f5e18446e95d13433bb0dc7b7965ab21cc1d884bc754424c1dcd2ea48f57f419
Files
-
JaffaCakes118_f5e18446e95d13433bb0dc7b7965ab21cc1d884bc754424c1dcd2ea48f57f419.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 394KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 9.2MB - Virtual size: 9.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE