Behavioral task
behavioral1
Sample
eab45a47fb71756d1b247562dc378e79_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eab45a47fb71756d1b247562dc378e79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eab45a47fb71756d1b247562dc378e79_JaffaCakes118
-
Size
1.2MB
-
MD5
eab45a47fb71756d1b247562dc378e79
-
SHA1
a853aea0484173c96076b23b4b390da5721cee94
-
SHA256
f6f8549d670d262b59373e83db5942d6fe2ccb4f632d9e1dfc7b6e3ef87d4fbf
-
SHA512
604d963e9d1970fb4b4c38171f1a286d071ed42b9dfc039a091fe6d26dfda7d329e81ba64fa657a626a985ffc4229212709430de50a71e0ff1ad0d29888e5824
-
SSDEEP
24576:1ArA2KnXVVSKRRV09CiT8crf+W9S/vcHGODzAwAPC7+3Ze6:1SMVzVA7drfK0HZ1AP4+3h
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab45a47fb71756d1b247562dc378e79_JaffaCakes118
Files
-
eab45a47fb71756d1b247562dc378e79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE