Behavioral task
behavioral1
Sample
e108960044c8cfb17eab1d5cbb85d22f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e108960044c8cfb17eab1d5cbb85d22f_JaffaCakes118
-
Size
379KB
-
MD5
e108960044c8cfb17eab1d5cbb85d22f
-
SHA1
ea0f134fccbd37adac4289ceb796b9b15a0032f4
-
SHA256
b7e434f0f9edd732dea506fc665f85e073286032cb52c3d075f7edd735e4edbb
-
SHA512
18faf58cd6d17e767ac53d4652702529e12ae50c50ee573b96c9f9b028f51f04a3b3ce1796755803c54343a6e30fd5b596d4b6ea60ca010ab4a7d807d9c519ad
-
SSDEEP
6144:fp77YKDbJke+bMsrouHzoS9l+dzees4EFhFmS0Us/oqXFUmL+NQF/vCyuc9SY528:h77XN+g5gbl6zLcjFmSsAGWOZqWSG2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e108960044c8cfb17eab1d5cbb85d22f_JaffaCakes118
Files
-
e108960044c8cfb17eab1d5cbb85d22f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 361KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE