Behavioral task
behavioral1
Sample
3b0cb756bb321406b69b26b6e37610dd_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
3b0cb756bb321406b69b26b6e37610dd_JaffaCakes118
-
Size
694KB
-
MD5
3b0cb756bb321406b69b26b6e37610dd
-
SHA1
2e9debccaa97b22b1b8662b45810aabc6b5e3476
-
SHA256
9843c48b59813a9c3493978176e5b8890a3f10745af64acca3bed95d1b306272
-
SHA512
1f57145aadfb90558d9674eab888ed0f2a48dd12fac29af259192ac96694b33d9a94632e77744fe4064454df7be469c3ef485f220eb7ed3c451b43bd21ed383e
-
SSDEEP
12288:rXBD2+RhL4xrFiDjHMnCvUhg0v44yUOGDsH5mReZZYyqz4G:rXhRhL4xrwDcThg0vDTIwkyyu
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0cb756bb321406b69b26b6e37610dd_JaffaCakes118
Files
-
3b0cb756bb321406b69b26b6e37610dd_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 91KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 597KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE