Behavioral task
behavioral1
Sample
e1f9aa091985cd7b59432ccbb1b7fd34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1f9aa091985cd7b59432ccbb1b7fd34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1f9aa091985cd7b59432ccbb1b7fd34_JaffaCakes118
-
Size
625KB
-
MD5
e1f9aa091985cd7b59432ccbb1b7fd34
-
SHA1
529eb56b97d67f1c124512292b2210512ece3c5d
-
SHA256
b6530b4fcd3716cc94bc25ab09c8d34c083145424f4ee34123db41bcb9fe6b8e
-
SHA512
b4c2fe12d34e78903dee25a122faf8d51296c2bc5b9533cca0f632bcefa58c57842ddeb9b04b4ab13b6f27c2ca0065bc211a46127c32bcf4fc898e38d7747231
-
SSDEEP
12288:EE4E2NoeW6XuHB/7UFjnHIM+gB4GmCiMOBRQ8RTZIg3wPGDMlongmGcUO:EfmeWR/Y9h7ECiZz/RSggeDMmQ5O
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1f9aa091985cd7b59432ccbb1b7fd34_JaffaCakes118
Files
-
e1f9aa091985cd7b59432ccbb1b7fd34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 115KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 505KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE