Behavioral task
behavioral1
Sample
423433614ed0ca5f32b44b4fa95fd7f9_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
423433614ed0ca5f32b44b4fa95fd7f9_JaffaCakes118
-
Size
768KB
-
MD5
423433614ed0ca5f32b44b4fa95fd7f9
-
SHA1
37fdaff7341e063297106c9c014a25cba621c7e6
-
SHA256
40bba631ad084e3bf11f16e17cb6b89db7c65a394f8a55813f5b6bebf234252c
-
SHA512
4d8571c644dacd67dbc601ff026e437972148bface5a280cef90414d99c4e3260bf9f2776e58e7259ce855602ac500a74c08eafab6051b759de16e50df0f2bea
-
SSDEEP
24576:HtDmV4hApBUS+RDkoljoMjONG1K6o7Jd/:HZhAjUNlsMjz1KJz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423433614ed0ca5f32b44b4fa95fd7f9_JaffaCakes118
Files
-
423433614ed0ca5f32b44b4fa95fd7f9_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 165KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 598KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE