Behavioral task
behavioral1
Sample
36adef790d73ee717662dd42fe27a988_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
36adef790d73ee717662dd42fe27a988_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36adef790d73ee717662dd42fe27a988_JaffaCakes118
-
Size
729KB
-
MD5
36adef790d73ee717662dd42fe27a988
-
SHA1
670d460edd69c5267d337217c50ae1ad21f403c1
-
SHA256
114c73731478ade576f8ceb382be5cbacadccb6bfb4cade3a2eb13aacd2e1814
-
SHA512
a987130c342afe064af21a7b18a1eb28270bd92e9966e7c9aa503e395318922dad14c0f5cbaad1bf90d5775b150cd6c7e4c9f578ee1284df87a89a388d23632b
-
SSDEEP
12288:gegpr0l2OX7ShqIi8ZTjZmwHJuMA8kJinNiS:mrA2kSh5iUjE8A8rB
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36adef790d73ee717662dd42fe27a988_JaffaCakes118
Files
-
36adef790d73ee717662dd42fe27a988_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 620KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE