Behavioral task
behavioral1
Sample
JaffaCakes118_b1251615adcaf2ce3855a3145a60cfed.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b1251615adcaf2ce3855a3145a60cfed.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_b1251615adcaf2ce3855a3145a60cfed
-
Size
1.6MB
-
MD5
b1251615adcaf2ce3855a3145a60cfed
-
SHA1
47b7ace3d539d4a976dfed91a1df01f6eb16a38b
-
SHA256
466e6257dfac062a20d21f899d6fe9fe43d4dbc569622097f3d686e5503d8e0a
-
SHA512
2bfff9ee2276a8584322ab1fa165d0280b131b45a006e3f5d8b8d203620a7a4e474251f03da37e2c2a8bd2578b7fef3cd8b31cf646485a984c65c6763c506ad2
-
SSDEEP
24576:MIuI3Y0qwEZmNj4hDPvHiQHyjeXDOuf2DdsmGFAPxFy7b2Tpju0bBKF5WpqSJYxr:F1o8mHnCQHLTzf2D/GEC0bsFMpqC017
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b1251615adcaf2ce3855a3145a60cfed
Files
-
JaffaCakes118_b1251615adcaf2ce3855a3145a60cfed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 891KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE