Behavioral task
behavioral1
Sample
fec36202acb40610ea4d070f718af412_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
fec36202acb40610ea4d070f718af412_JaffaCakes118
-
Size
592KB
-
MD5
fec36202acb40610ea4d070f718af412
-
SHA1
2a4a65885e9ef7e87f1d50d59bd47f23976d7080
-
SHA256
5d375126c229fe3b23678b51451b30030e71047af09fefe578218ae2bb8a3c33
-
SHA512
4a569a9f90fe262821ca65c4ea592786eb358dec14b3707b1f6ae838dc21d8cf9d4f5e49d9dce9b1d273e7dcaa8dbb0910cb6660e4325daed19f543ca2997191
-
SSDEEP
12288:IBZLPFT7bECT62AggkLh6Vp6n0IG6XShLW9C2mVqU9Olp6lCsaAlm:UpNfbperaXn0IG6XShLWHyqlp6lv9
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec36202acb40610ea4d070f718af412_JaffaCakes118
Files
-
fec36202acb40610ea4d070f718af412_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 572KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE