Behavioral task
behavioral1
Sample
ea9395739e2e21e415a2ec5b19ff1085_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea9395739e2e21e415a2ec5b19ff1085_JaffaCakes118
-
Size
4.5MB
-
MD5
ea9395739e2e21e415a2ec5b19ff1085
-
SHA1
0194cef92ed83b9bdcd5e56f1e8b3ce0417325de
-
SHA256
259c26d577bb1a511d84944bb4da21b026365a468846064357d0ff3cc72a285b
-
SHA512
937e403aa25fbbaa49c26d70ef0d02a09ba5dbf39ac9916efab5678590d4df77273e871e350afa96ec6fde84a2896ea4c3414480584847efca02ac5d01540f31
-
SSDEEP
98304:Z84INza2jZzwgWNlz6M7Iwio5kaZOuqDCgVGooYVYqWw+iq8r:Z8xpjZez6vwiQqegpX
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9395739e2e21e415a2ec5b19ff1085_JaffaCakes118
Files
-
ea9395739e2e21e415a2ec5b19ff1085_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 422KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 623KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE