Behavioral task
behavioral1
Sample
eb936cab88cd3e00feb2d21f6f1a3d27_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
eb936cab88cd3e00feb2d21f6f1a3d27_JaffaCakes118
-
Size
1.8MB
-
MD5
eb936cab88cd3e00feb2d21f6f1a3d27
-
SHA1
e0ee352e4625042c131e893ec3a6cd32e5970f74
-
SHA256
b37c812e01d946dd512af6ba1af9eafa13df246bf3bfc3320756148ec1f485ed
-
SHA512
32e6fa14b376cb49e8dc962833d45c6eb2620e04cd17e0a9bc5e47d705bde1f6544a589e7a5f0dc94e739b361cc3433e3b289b9e174a84b440edebb48c09e3fb
-
SSDEEP
49152:iqaHOa1eYwdFJ4NodFuF+nMEt55CYYRsIRtdAKd7r7AV:iqUOaYuNodQ+nMEtjCRjT7e
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb936cab88cd3e00feb2d21f6f1a3d27_JaffaCakes118
Files
-
eb936cab88cd3e00feb2d21f6f1a3d27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.8MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE