Behavioral task
behavioral1
Sample
260d696313a792a13335711fe20a97c5_JaffaCakes118.dll
Resource
win7-20240419-en
General
-
Target
260d696313a792a13335711fe20a97c5_JaffaCakes118
-
Size
698KB
-
MD5
260d696313a792a13335711fe20a97c5
-
SHA1
e6dd8706450777d96b50193a9a724f827d879293
-
SHA256
8f0211e1e3c5d871ea08bea742af1bf249f276fa1bf7ac0a9c99cadfa7a38a91
-
SHA512
9c4b55e43e429a5c11919b19c27785e4299168dd491293802dc87f90a06b337ee9ab9974d2e97f67a08edc34d146cf95197945839d64197c49ea895946479c7e
-
SSDEEP
12288:Z2lSKsE9T6M6tP87GIqijH/GLJL5NlhbqvMdLe8q8HAu9tIIlqmT9oTzC3PYqL:Z2Erw6MWdijHsBcvce8XkIlHT9oTzePR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260d696313a792a13335711fe20a97c5_JaffaCakes118
Files
-
260d696313a792a13335711fe20a97c5_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 91KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 602KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE