Behavioral task
behavioral1
Sample
ee803a30faacab2fc364faa743f69db6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee803a30faacab2fc364faa743f69db6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee803a30faacab2fc364faa743f69db6_JaffaCakes118
-
Size
1.2MB
-
MD5
ee803a30faacab2fc364faa743f69db6
-
SHA1
aaf7edfd74f29fbca916eb2e0d7fc972444f4d1e
-
SHA256
4c92fc83e50c009b3b03fd3754c3199bf72035225b1f0eb22fd6bbb45c5d9883
-
SHA512
256b6572ac40a8c580fbd36b4f2dc188ab1a549a68c516815bf626cf78204a1f085c873a8f99ccf0da13fbb03da72d3640f484df3052571bf080dc589ce290bb
-
SSDEEP
24576:UM040rh3YZMzDL/8xiHqFvswdU7ttxijWpj/NUspgfm8L:UM0lrhsMXLNq5i7ttxFhq/fV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee803a30faacab2fc364faa743f69db6_JaffaCakes118
Files
-
ee803a30faacab2fc364faa743f69db6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE