Behavioral task
behavioral1
Sample
fe9de199fa421117b0040cfeb19f1b6d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe9de199fa421117b0040cfeb19f1b6d_JaffaCakes118
-
Size
944KB
-
MD5
fe9de199fa421117b0040cfeb19f1b6d
-
SHA1
5a11657574f6bc241c11e7797a08a22f37b1b4e4
-
SHA256
9b788ddd64a8864b36dd6a15a164c4af45d01e6361dc62d45f671347b0f373ad
-
SHA512
b122d9b41bc0a5c9cb67e1f9cb25a39744c2e17b2371564d583dbf80e7773e41109d76ae2f26f9f08fb3ab2e2e3c8f09eb50cef808d8e85ab46ec4eb58eed98d
-
SSDEEP
24576:DGwv0lklp+uwwXlyOvoQ7xwtO5/hzcMyoML64VKowU4s:P8lklsOrgQdYOrHyoMLdKLs
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe9de199fa421117b0040cfeb19f1b6d_JaffaCakes118
Files
-
fe9de199fa421117b0040cfeb19f1b6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 212KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 717KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE