Behavioral task
behavioral1
Sample
718bf1fe9844fde7224fe0c0689c7133_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
718bf1fe9844fde7224fe0c0689c7133_JaffaCakes118
-
Size
699KB
-
MD5
718bf1fe9844fde7224fe0c0689c7133
-
SHA1
f41fcbafe9514d70c19797dbcf05de50b097674f
-
SHA256
991572bd1cd440b217fb3c4382261c93c739c3b2ff24555f9e12f818101b0491
-
SHA512
a62ada3d946308317c24706a488ec71c0c8f96f7bb68aeff52ec752ceb0f2ab130e86b760f7072d9d1d04dd941d6f42e14082f17ff425adb9fa604f1a3d82b23
-
SSDEEP
12288:jAKO/h4VMkl+a84n4Fd+CLbcnfLgi8HDuWiqYQjVHxI5rdhhGJCLEZeT/:jAKU4zyJdTwn8iDDHQZRyjsJCAk
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 718bf1fe9844fde7224fe0c0689c7133_JaffaCakes118
Files
-
718bf1fe9844fde7224fe0c0689c7133_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 93KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 601KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE