Behavioral task
behavioral1
Sample
e880bb0d46e776e2fecbe71b352ca692_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e880bb0d46e776e2fecbe71b352ca692_JaffaCakes118
-
Size
2.5MB
-
MD5
e880bb0d46e776e2fecbe71b352ca692
-
SHA1
e7ecd2c8305aef83ba3e1dedebf7d9f80e3d0822
-
SHA256
5c4332ca0e4845cfff3e77f45db5754b81a960a55b6c41877a2104a81f04382d
-
SHA512
253a86174fdb39be2854ddc2918766830f3f7ef3ad13605e724787f36fed81b33d9474c926e01359650c7049130a8f5d811f2dba827e077938adc3e346b55c37
-
SSDEEP
49152:a3ySC1+zSy9q0rOC59R0J7poumd6+wHb7TDw8MGJm6BHUp8p9IObE:mySCQ/9q2OC2ojw7DwVYUp8paOb
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e880bb0d46e776e2fecbe71b352ca692_JaffaCakes118
Files
-
e880bb0d46e776e2fecbe71b352ca692_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 104KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ