Behavioral task
behavioral1
Sample
2e885c1fd2edf5adcaaad3c835aa9ffd_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
2e885c1fd2edf5adcaaad3c835aa9ffd_JaffaCakes118
-
Size
1.7MB
-
MD5
2e885c1fd2edf5adcaaad3c835aa9ffd
-
SHA1
9fdb31eb427fb30d5386cdc3f2381578b17c91d2
-
SHA256
80afa0bc050f558d5218e185b9874e8f2438021e7f399db09aa30eae2b9a6ce7
-
SHA512
440c4ebbdfb111f9dba1423b25c1436531e8afd59d59b70fbd309db76605f594aa97da063743f03d56cbfda086d26522261a6688b99d1aeaf7fcda7f1763244f
-
SSDEEP
49152:jVa+Md/MvcBMMbCSsjw1pcpO48tSEubc3EV:wB5zMbPjycy0EU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e885c1fd2edf5adcaaad3c835aa9ffd_JaffaCakes118
Files
-
2e885c1fd2edf5adcaaad3c835aa9ffd_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 89KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.6MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE