Behavioral task
behavioral1
Sample
ebdc870cb27f818bfa1488742b30abf3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebdc870cb27f818bfa1488742b30abf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebdc870cb27f818bfa1488742b30abf3_JaffaCakes118
-
Size
519KB
-
MD5
ebdc870cb27f818bfa1488742b30abf3
-
SHA1
50e35fd7ec96b23b06eb35f55c436406ff8738fa
-
SHA256
e6605f1ea5949df69864d17fcb2898f6bb4780657f1f0f036a755fde7988e182
-
SHA512
eef0b36de1677daf77ba53c496340fbf39a49371327ac265bc8f04316ba676247efb7e182e3d52e924978dacc8d8bd0badbdba50df41672512ef16c568e1e692
-
SSDEEP
12288:pSLHUK2BJIR1VljzG3eQ8Iz7sF+3S4jiwU4EXqHml4uAJ:pSAM1I8IHtRjbflml4uc
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebdc870cb27f818bfa1488742b30abf3_JaffaCakes118
Files
-
ebdc870cb27f818bfa1488742b30abf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 64KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 728KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE