Behavioral task
behavioral1
Sample
eefbbb2b326c5dd4c365da2d2dad49c0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eefbbb2b326c5dd4c365da2d2dad49c0_JaffaCakes118
-
Size
756KB
-
MD5
eefbbb2b326c5dd4c365da2d2dad49c0
-
SHA1
ebdc9297a7d4fa93764a23ebd655b5eb7389def6
-
SHA256
c5b8e3ee6fb83f80766f34382b357fb01e6812f13d7e849f99f5701b8ad5e2e6
-
SHA512
ab770ea5b93ca5178407974c77c3a1bf050c2a07aa186bb3fa59e3ce40cb28d24b47e283d3ea8ffecad0ad11b73cb1939b6b44733e97fc3cb91256a4715de65d
-
SSDEEP
12288:KnNYFXN98TnBItLFv78RV0rz71QHI6O1IZ25PLH+4ec16Jwa4bSAvIrvUHSMP:KneFXN9sBQFzGVoz6qIqJ6JwaEjvgU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eefbbb2b326c5dd4c365da2d2dad49c0_JaffaCakes118
Files
-
eefbbb2b326c5dd4c365da2d2dad49c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 624KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE