Behavioral task
behavioral1
Sample
06bf935271595bccc8747b27e6ff1632_JaffaCakes118.dll
Resource
win7-20240611-en
General
-
Target
06bf935271595bccc8747b27e6ff1632_JaffaCakes118
-
Size
726KB
-
MD5
06bf935271595bccc8747b27e6ff1632
-
SHA1
aaaa1be6e18d3dfdc5c1ee87769eb4f6252799d7
-
SHA256
cdd5c9cb63dbffbac7c8ed1971de56237d29e3891a3271cbbb0c375b391a4412
-
SHA512
20c0c16d295c6d91288aafaffc674f039341b8ad6194d4c0328f6963b691cec2c2ff417216887574cab427644bcf1fc6cfae00e3baf0ecb59f6bf8643ffe163b
-
SSDEEP
12288:lmqBNtVNN8VaS2AHD09n8eARN0cYVYCaTHEOwRn1FEETzz0ZEjkQ0YEOhFa:lmYNvMagjQetqAkOwRnz3jt0YEQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06bf935271595bccc8747b27e6ff1632_JaffaCakes118
Files
-
06bf935271595bccc8747b27e6ff1632_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 82KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 638KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE