Behavioral task
behavioral1
Sample
5cefec38e1aa05e4eb415909049aa985_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
5cefec38e1aa05e4eb415909049aa985_JaffaCakes118
-
Size
614KB
-
MD5
5cefec38e1aa05e4eb415909049aa985
-
SHA1
a09053051645b2865933a364d0ac60d0d2810824
-
SHA256
c2a52ba94f5eecfcbad833f4059e2c6c640a3dac2f1ddd17c0d039e1affa992f
-
SHA512
affcea753ad94308c52bbf1aafea37acce0fc5f5b0c67f3d4e7c704a71e91ba35ce972a2aa6b735c865b0721ce3b3554c669ac434105ba060820a53176c962ca
-
SSDEEP
12288:GW1tO4Grl3ewGKP/7V8UCoxfPxgt/j2mLISrz67IWnGIriTz/r2FAR:GWHOzVoKPjCiSt/j2fqSI2GI2TzOo
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cefec38e1aa05e4eb415909049aa985_JaffaCakes118
Files
-
5cefec38e1aa05e4eb415909049aa985_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 603KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE