Behavioral task
behavioral1
Sample
JaffaCakes118_647367f2bceae00cc0a2233134c009f0.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_647367f2bceae00cc0a2233134c009f0
-
Size
991KB
-
MD5
647367f2bceae00cc0a2233134c009f0
-
SHA1
b5bc30d005cdc6f6435fff9afb93a855e1205ca7
-
SHA256
152e91dcc743f5f8eac55382d215ef544d3bf0a5ae185c7d45ccc0b898f204bc
-
SHA512
a0df2cd517fb20762d7d0983e69e644b256326fa47bf80db9f615d11ceed8c96fe8a442de393846297468d8ae782ada0d88dfd396351607e996e06282058c654
-
SSDEEP
24576:cGkKmZOklwemI5pUdcJ4xbCr7kxF7cTe83:clOddWdvkxFq3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_647367f2bceae00cc0a2233134c009f0
Files
-
JaffaCakes118_647367f2bceae00cc0a2233134c009f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 673KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE