Behavioral task
behavioral1
Sample
e89e9384f008f59ee05f5017c0e9ec80_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
e89e9384f008f59ee05f5017c0e9ec80_JaffaCakes118
-
Size
795KB
-
MD5
e89e9384f008f59ee05f5017c0e9ec80
-
SHA1
d11bbf9c0fb5b72efa7bee4c0f0860e6215bb125
-
SHA256
cfae8034fef45650738b4bd719f9f492b252879722a19440e246635d4416e9b3
-
SHA512
b095cc7525a670fdfb9662ec07490d19095c4341f94938d6a41eb4cb14ae09767b64d6f691ef77b7bc4e3a80b6da2726bf71efbd7488e94614f0c53c0ff2676e
-
SSDEEP
12288:oIIQ4Jqe5+MRg7GzIXdqis7Ykorby/dRUixCOwq/lKILl/SaMpoKGz:oEve5+1GzSdqDofy/dmixCI/lHJk
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e89e9384f008f59ee05f5017c0e9ec80_JaffaCakes118
Files
-
e89e9384f008f59ee05f5017c0e9ec80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 635KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE