Behavioral task
behavioral1
Sample
JaffaCakes118_98403eafbcf101d85e2430a16faf3706.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_98403eafbcf101d85e2430a16faf3706
-
Size
2.3MB
-
MD5
98403eafbcf101d85e2430a16faf3706
-
SHA1
4380ed76f1db7b5d5005be007d22e45cd43c76a5
-
SHA256
d678b4a46d5a6ce2563bbb9875615d73e4d81a09163db2a8c81070552d395d2d
-
SHA512
db2c29e1605e3b1d49677ddc2ab1769935a1cb7a773dc92b6da42ac50ae9c389944d7a9a80d05e16c9b1b6205fbd71c96eba409baee7ebe6d0367469a62a51a6
-
SSDEEP
49152:H4K8kzHnk6T+Mt56XeZ9+22/iWv6TkOQA46+WWOdIDKblWWKaRtll5qH:H4K84tnSx2QPzFWBWDKxJKytl7y
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_98403eafbcf101d85e2430a16faf3706
Files
-
JaffaCakes118_98403eafbcf101d85e2430a16faf3706.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 45KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ