Behavioral task
behavioral1
Sample
JaffaCakes118_558140ea2c04f37d95c72a43073c1027.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_558140ea2c04f37d95c72a43073c1027.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_558140ea2c04f37d95c72a43073c1027
-
Size
1.4MB
-
MD5
558140ea2c04f37d95c72a43073c1027
-
SHA1
9fc3bf1496f519ede537e8820de522ebf2c041d8
-
SHA256
3a11eb449ae8e2880a403251f7270ede453a7d424e5297e44810cc43c6dbccc8
-
SHA512
9f248722a3fdedf627fe568b1a26212dcd9922fd8ba947d074fde031fb32c5fd42dbdbd9b7416ab46fb4b60103cd7bccd256937c1a3576c97879e595bd63c3cc
-
SSDEEP
24576:vyq+e/hqP14vf6Xj3u2EJiqMdJWQb7EmXqYdchgaZL+gy35T5n7KMLDn58:6qM4vcj+2EwaQb7HFdc/ZrypTRKMHn58
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_558140ea2c04f37d95c72a43073c1027
Files
-
JaffaCakes118_558140ea2c04f37d95c72a43073c1027.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 668KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE