Behavioral task
behavioral1
Sample
e1f095608b3e383b7f9f559a8db737c6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e1f095608b3e383b7f9f559a8db737c6_JaffaCakes118
-
Size
4.0MB
-
MD5
e1f095608b3e383b7f9f559a8db737c6
-
SHA1
e10b59bc05ab1fce0d95f86b8b3d8098c14184ef
-
SHA256
fe54ee6b392e3af3566f40792aa0d67cd5aa4fc5e97c8373fa386afe6aa370af
-
SHA512
2ffce1e126305d9145c04461d0a9b0d7e26ba4c5ee2b076067ff548b703f3acb5c6ce83078203ef8883cee15f8c37d3597a98dad94f12ed3105cf8ae39f6d080
-
SSDEEP
98304:wozvBPh7Os8ZGonEgAYKm0V4BTEFsuSb8xHxd5nXBgYD:PzvBh1KnEg5SCBoFsOxHPBBJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1f095608b3e383b7f9f559a8db737c6_JaffaCakes118
Files
-
e1f095608b3e383b7f9f559a8db737c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1010KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 696B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ