Behavioral task
behavioral1
Sample
e58e2d2d2fab88e1b2f8c88aca3118b9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e58e2d2d2fab88e1b2f8c88aca3118b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e58e2d2d2fab88e1b2f8c88aca3118b9_JaffaCakes118
-
Size
1.0MB
-
MD5
e58e2d2d2fab88e1b2f8c88aca3118b9
-
SHA1
ae561eff64f535794c266a70c8506bb10d430bbd
-
SHA256
15ec190cd1510696b56bc112c84902c862f052d35d5eff70c9c6dec9ce99816e
-
SHA512
c072a53c3946af6a126c87c907f790e6721617cd2830d55b77efbe944b10c3e3545c523d0bfaa8981a65058cf9272160a7920c587c3d3b987bd597f3cb9382aa
-
SSDEEP
24576:Y3V7WvUvQp3+cNa+UyVD/YuB3l9+Du3FtAdhNDQjTj/:27DvQpNaHDu/Wu1tAdhNDQjTT
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e58e2d2d2fab88e1b2f8c88aca3118b9_JaffaCakes118
Files
-
e58e2d2d2fab88e1b2f8c88aca3118b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 660KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE