Behavioral task
behavioral1
Sample
6619ca18d6f068e2eca63752a20b22b3_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
6619ca18d6f068e2eca63752a20b22b3_JaffaCakes118
-
Size
693KB
-
MD5
6619ca18d6f068e2eca63752a20b22b3
-
SHA1
8b124725231ff9670cf9ee8a9cbab9d211e4af1e
-
SHA256
6e3db66c42c2f8c1d251d8f142ece70b559777b300ef270414ea1d04b41ee682
-
SHA512
834d66c576894c8ce6739394a2eca986014f730b225548c7c69d9079c6618715a3e893dc67e972b8bc82adb649ae26ee48e28ec9408d03acc9ef65d61517059a
-
SSDEEP
12288:rsd1hmLK/x8W0Ux7hZvXHApttyijJP5q0H9FqNm1CklLqMfAVhMBdMK6YaXt80Q:MhmWeqrHytRt5qSom1Ckl2MghMNnN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6619ca18d6f068e2eca63752a20b22b3_JaffaCakes118
Files
-
6619ca18d6f068e2eca63752a20b22b3_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 45KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 642KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE