Behavioral task
behavioral1
Sample
e1e1c9bce5d48f8862e85f1ca893fbb9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1e1c9bce5d48f8862e85f1ca893fbb9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1e1c9bce5d48f8862e85f1ca893fbb9_JaffaCakes118
-
Size
1.7MB
-
MD5
e1e1c9bce5d48f8862e85f1ca893fbb9
-
SHA1
c13e95bc5ce5b2f132a5db8b4f07ec4d72e08b20
-
SHA256
90e06a2f07e772e3c603d02d59c74d564d0c1a4312debc51dc386e9a886d11e3
-
SHA512
3678f0dc19db4283984cdac5902f321b192fe8bb56487070c9c70e9a7e0010e725278ceba178e6404e2f5b56aba3fa6049a6cd4d191becf2b1aa3aaf732d8307
-
SSDEEP
49152:jfJwTWA2emF6epVaSVaWyYTMdUmoclloCBAYmXjacN9g:jfyTWA21Tz5mNfy3XuD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1e1c9bce5d48f8862e85f1ca893fbb9_JaffaCakes118
Files
-
e1e1c9bce5d48f8862e85f1ca893fbb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 540KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE