Behavioral task
behavioral1
Sample
eb511ccaad2bd1751f5ea15df37c0ae8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
eb511ccaad2bd1751f5ea15df37c0ae8_JaffaCakes118
-
Size
1.5MB
-
MD5
eb511ccaad2bd1751f5ea15df37c0ae8
-
SHA1
b4884031d2e8083eb0642f46f091ab7f50e619e2
-
SHA256
c734f43245e40e4f00ffe0537e6194e2a9b5018def78ea7cb2b90e7e59155e64
-
SHA512
0a265f2bc8999ba55dc8c2b7abcf33badf4d405fa20a54abf235f6357c6aee726fc9e48697e52a9538f16641224d55b11e79bc05a2e9b69d073ac31aff4e811f
-
SSDEEP
24576:xdAw5ThqaUocH/C6luMTeqao+z967d4o4bPhhNHIAoqvLcgezDg//z6YKsVF7VX9:x9qav1ovKqaLz96wjv5IAJv4zWuYbFZt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb511ccaad2bd1751f5ea15df37c0ae8_JaffaCakes118
Files
-
eb511ccaad2bd1751f5ea15df37c0ae8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE