Behavioral task
behavioral1
Sample
8db26f4e49a3faf0cfe4ec84ddcc3f1d_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
8db26f4e49a3faf0cfe4ec84ddcc3f1d_JaffaCakes118
-
Size
713KB
-
MD5
8db26f4e49a3faf0cfe4ec84ddcc3f1d
-
SHA1
f75e645d0f88811f60c5b8de425d8b3a3b12a19b
-
SHA256
96039e3270f73085dc148474527192e2e6b6177c7c49b8a433efd9b0bd4d347c
-
SHA512
b89b0a3b928c62daca1a24615c8f0e3a2c4cb7063d7f96efde42e57d9645a61e3d1f14b242248fd082cb9b6e88833df88eeb5e6aa80ed6136d89dfae8799469a
-
SSDEEP
12288:KO9UIC9vyH5Dq4NlS7Hd6PKBgTbwgAYBXLe9JKyAeZADQb/wrlMw:K/vyHhq4nSx76XwgA2wjAmaB
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8db26f4e49a3faf0cfe4ec84ddcc3f1d_JaffaCakes118
Files
-
8db26f4e49a3faf0cfe4ec84ddcc3f1d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 90KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 618KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE