Behavioral task
behavioral1
Sample
36ec16cacdc1744eb65238cfcedcb992_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36ec16cacdc1744eb65238cfcedcb992_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36ec16cacdc1744eb65238cfcedcb992_JaffaCakes118
-
Size
1.2MB
-
MD5
36ec16cacdc1744eb65238cfcedcb992
-
SHA1
af5e851dddbf4e22651dcc23ace0f4fb11503a33
-
SHA256
4dcfdc28921840284bf47b76bdae829c39723edeed5b4b55b59c742baa39891f
-
SHA512
f7f9d43d01fc6d68b57cf2a9cc96ded5285a9e38733ab72900f9c8b2e3cd69e9cc339374b142b28f887e7decb174e2120a508998a8edbcb1e56a2233e44d7e6f
-
SSDEEP
24576:K71AaVdkBMmop8hklJuDBkWflbObrrGshMt/UzKrlQ6DDeO:wSaMBMx8WlJZqpObrRhW/prJDCO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36ec16cacdc1744eb65238cfcedcb992_JaffaCakes118
Files
-
36ec16cacdc1744eb65238cfcedcb992_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 220KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 844KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE