Behavioral task
behavioral1
Sample
392cd7a04c79d93174965c60c843ce9e_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
392cd7a04c79d93174965c60c843ce9e_JaffaCakes118
-
Size
928KB
-
MD5
392cd7a04c79d93174965c60c843ce9e
-
SHA1
5af11762abb6f5ba09ab80071ae7a4617c76cb17
-
SHA256
aa6cf4666e051693dc49a7271d4b4701e8682cd182e5cefb371d681d71670554
-
SHA512
da2ab9c47dfb5f10293503d58341ea3c5a5457ee09bd7b802bf7aa7abfd09fa0586d3ffdf1cae0a064421f37ace56c256e21877cb7fe2e3f1309e64c054f231d
-
SSDEEP
24576:VZn9oJHRjuxukUw48jQBB/BQsatym2rws6oQ:P9kHRjORUDTB+saEmTs6o
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 392cd7a04c79d93174965c60c843ce9e_JaffaCakes118
Files
-
392cd7a04c79d93174965c60c843ce9e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 211KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 704KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE