Behavioral task
behavioral1
Sample
JaffaCakes118_0a1f6ee1109d2a9f496a17a8c83ab03b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0a1f6ee1109d2a9f496a17a8c83ab03b.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_0a1f6ee1109d2a9f496a17a8c83ab03b
-
Size
2.0MB
-
MD5
0a1f6ee1109d2a9f496a17a8c83ab03b
-
SHA1
5cfafb0faf1aa2eb2723c4dba6befe10b0ab51e2
-
SHA256
85d1b250a5232848a4cd68f7ad7c4f6e870fa481c066131d1fcb500d4d8e841a
-
SHA512
7bfe2e0bee9f714ccabba563fc87198b0ac9138fb22b483e99656241a375dfa744622a934997b9f3fd40252c9c87f5219085a0bcbf60f20dd12477b4df05a661
-
SSDEEP
49152:BA4pmIrkvvDca7DiwCNwIn7mWrNAlYuMsAl5ElULOvCd2Pca:y4pmlVgNwEmW5ngl9vCd2P
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0a1f6ee1109d2a9f496a17a8c83ab03b
Files
-
JaffaCakes118_0a1f6ee1109d2a9f496a17a8c83ab03b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 3KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 711KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE