Behavioral task
behavioral1
Sample
eb3adf11922a9942353dc8d1d2844f38_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb3adf11922a9942353dc8d1d2844f38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb3adf11922a9942353dc8d1d2844f38_JaffaCakes118
-
Size
1.5MB
-
MD5
eb3adf11922a9942353dc8d1d2844f38
-
SHA1
ed63da6901cbd8ff78c77df1115676cf62a0a2d5
-
SHA256
0dc36b9302186d693415f0751a39ce1127282d9daa81a9901ffdf9ab4b1db4af
-
SHA512
8b0fb363f0fecb5054e986869d2d218f340b09929e429835a5adfec16768fdf9a08df4eed0a109b60a76e4c38a3e83433553e604b6e78c106889df70a4956cbe
-
SSDEEP
24576:X7boG31D5tsc5m694DLbyUqn61L6aHB3imTZxaw/MOti9+Yyzg8U63lfpZRnZQn:J1NtP5lqFq6V6A4wxD/1jYC463lfp
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb3adf11922a9942353dc8d1d2844f38_JaffaCakes118
Files
-
eb3adf11922a9942353dc8d1d2844f38_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 346KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 10KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE