Behavioral task
behavioral1
Sample
8e7c1ccce6dc9e9c11acb871efba6047_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
8e7c1ccce6dc9e9c11acb871efba6047_JaffaCakes118
-
Size
692KB
-
MD5
8e7c1ccce6dc9e9c11acb871efba6047
-
SHA1
703bb7364aee0d49ac209d3a45d4b43add35acac
-
SHA256
219112c130488ad8fe096f4e26d88b3c6c9f551ef3d67da9e132fc6108cb956f
-
SHA512
03ff1caf6922558d041ca714e41313d88b939f358adfd04d32f697b5ddc44edbfc2fa71cf842238c1b5ab38f8dbc55800b15ed6d058ad0ecc5ac38516156ac57
-
SSDEEP
12288:j0CCWt91hcogQH8lsi1J1EB/pb9uUO8K0NsADs9fXgrc6I7k7lf/k9pet:jFrfcSlV9uUOca/ELII7lf6It
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e7c1ccce6dc9e9c11acb871efba6047_JaffaCakes118
Files
-
8e7c1ccce6dc9e9c11acb871efba6047_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 85KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 602KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE