Behavioral task
behavioral1
Sample
ea2d8f69694f5eac9d19d0ce62ba40f7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ea2d8f69694f5eac9d19d0ce62ba40f7_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ea2d8f69694f5eac9d19d0ce62ba40f7_JaffaCakes118
-
Size
127KB
-
MD5
ea2d8f69694f5eac9d19d0ce62ba40f7
-
SHA1
a27aa89214a74279daab41f63f64ebcaabdf9cf0
-
SHA256
e3bfc0d9ea081ce4946d2a5439396a2ff6c4c83a181c60a3f4e3997933889a44
-
SHA512
57424b2bf953b3430ab4f3af417a33353715a2440141a7e9424f06fe86b30edd1c4c31820523574c0bd7830e68335e4b6b81a1f4e9c38a3e4726b97b4ac52473
-
SSDEEP
1536:cO6C/LuYUW+q/XmLsW+1++iPudnYShKX+VuJ/DDCRXr08x1P2Lv/JRrA4O3FeXnZ:cNC571f1+DetxuJCRXPx1OLHJRypZlm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea2d8f69694f5eac9d19d0ce62ba40f7_JaffaCakes118
Files
-
ea2d8f69694f5eac9d19d0ce62ba40f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 668B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 780KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE