Behavioral task
behavioral1
Sample
8418173a8d5d32cea5deedc913fe4b52_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
8418173a8d5d32cea5deedc913fe4b52_JaffaCakes118
-
Size
709KB
-
MD5
8418173a8d5d32cea5deedc913fe4b52
-
SHA1
d018424d00cb5dc6232d6e5fa8d8663404907e21
-
SHA256
983e3d3030bf3ef5d4a3944b14fe300df59eb0ccd75d9aaf59ca0408d15901d1
-
SHA512
bb568d369159ebed8e2ded1362607f3f933dde83902ab8ee80dc7e70a03af198f5579cb8671a7d5b4675ba8fc7bb6fe5dee9e704fbda7ec66e5f85ba3c0adc19
-
SSDEEP
12288:yyEqH6cb5XdheIvxWj3SVsE4LDxIFyuFsxsLZnqnZ9FEhMrohuroHBRsSJ4o+Gy:aob55axlY2sLZqjE0+Oonko+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8418173a8d5d32cea5deedc913fe4b52_JaffaCakes118
Files
-
8418173a8d5d32cea5deedc913fe4b52_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 90KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 613KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE