Behavioral task
behavioral1
Sample
9575dd0a1c3618140a46a896defe2aa3_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
9575dd0a1c3618140a46a896defe2aa3_JaffaCakes118
-
Size
1.1MB
-
MD5
9575dd0a1c3618140a46a896defe2aa3
-
SHA1
e976f4e5fe10a8304b9760a201917919c16de222
-
SHA256
579c9333bed862865b6eef0625305ca552f0ccfdb19b7ac992599e5dfeddcc4d
-
SHA512
b52e4e6df9f2f84753914fddb779e163b6e98c83dc566547c0fc48b6b21a9007d94487b41b04d6bb82d2421efcb71051d8173c574d018c3f9bfca37b92eff9ba
-
SSDEEP
24576:nWqtFrzcEvjmWoL7C5CNWGaHWmwDXwmpJpK91XkwU91kbleQ3fOP4:BtF9iH6uWk1HKw9qlPO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9575dd0a1c3618140a46a896defe2aa3_JaffaCakes118
Files
-
9575dd0a1c3618140a46a896defe2aa3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE