Behavioral task
behavioral1
Sample
eb9b16560f7efc296fd22cb85566f31c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb9b16560f7efc296fd22cb85566f31c_JaffaCakes118
-
Size
524KB
-
MD5
eb9b16560f7efc296fd22cb85566f31c
-
SHA1
2b5236a10ce1df09e47fa08137558e998e1f4bc9
-
SHA256
95c288b7823e346b4a2b8979e96db9318799629ba80637fc65a65ddc67d1141c
-
SHA512
443f4fed5b5dae09b9e4e68eebf5c41a8d4bffa3a0fd504c8024e5f91fbcb1948f941ce1f8f05c0311748e3d7331174986fbfdff864f9964d001d9ce3765c6df
-
SSDEEP
12288:3wt+9t6c1DegJITHmD9ikHCWf0y3gZIUVAeoh8tqLAJ8JiadoBSju:b6c11JkHmDM/WcSQIU21WWiae
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9b16560f7efc296fd22cb85566f31c_JaffaCakes118
Files
-
eb9b16560f7efc296fd22cb85566f31c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 491KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE