Behavioral task
behavioral1
Sample
ea9286e805000a3a371bb40439ff728c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea9286e805000a3a371bb40439ff728c_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ea9286e805000a3a371bb40439ff728c_JaffaCakes118
-
Size
947KB
-
MD5
ea9286e805000a3a371bb40439ff728c
-
SHA1
d4664b3fefeee968dc157d158864c82f2738bd81
-
SHA256
792ee16beb8c43b350d808185df04b700ac5eb04e4dda1dd6d01ae0fc3b7850e
-
SHA512
aa332a519e8ab35068b6f475510100aedfabd74b447bb8bf8dc6bca2ffa3cf7b451431fe90a8e8ad4d132ac84b48d5042141311b83f2dda4f36d3487415fd428
-
SSDEEP
24576:hEY1g13aIydRLVzH9SvqDmKmXuaq1w01p:GxydzFaq1wwp
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9286e805000a3a371bb40439ff728c_JaffaCakes118
Files
-
ea9286e805000a3a371bb40439ff728c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 46KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 896KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE