Behavioral task
behavioral1
Sample
fd37932be7cadd7b8295e8540a543802_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fd37932be7cadd7b8295e8540a543802_JaffaCakes118
-
Size
786KB
-
MD5
fd37932be7cadd7b8295e8540a543802
-
SHA1
10962017f617ca840f96a386663d99b1e86d996f
-
SHA256
fd735f45bb33b4ff724a71528c1833ba3fbc1327081349db0e4a0378213073df
-
SHA512
c1634ae47dc8151ca5ba47f3075daadedc783ca358fadba9b02d9697f155734681a80b73aca871ff4455b48d8f6872431ced8bb56e67ff10b9ae6ea5df0efb3f
-
SSDEEP
24576:u+YENwEP5EcmsU8PU6IqHHyMWVdV1FBXPKfa:vNwER08P3IISMW7DXPK
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd37932be7cadd7b8295e8540a543802_JaffaCakes118
Files
-
fd37932be7cadd7b8295e8540a543802_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 30KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 629KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE