BBSendPacket
Behavioral task
behavioral1
Sample
a8630d58f8fef7e65e3ce34b8a3c93ef_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
a8630d58f8fef7e65e3ce34b8a3c93ef_JaffaCakes118
-
Size
508KB
-
MD5
a8630d58f8fef7e65e3ce34b8a3c93ef
-
SHA1
3f8be95d871cb88335f3397298550a02582c90eb
-
SHA256
28bdc9b4fd6d2735cd4f1f2308f595d6dfa0e7dadf2551cda96b405fada65dfa
-
SHA512
1fd2ab3cf5f6a555dbc7a1d7a9a8ec72e3db3181da5e34bace073bfd02b6d1a4cb114510f06e9779e5ead7e3d51c4361341ba18eb682bcce8c9b06cf926afaa4
-
SSDEEP
12288:wxxZfzxavbG2tjGzofD4RMiaJ7pTEZdsC25L3bl3DcqrtWfHHkeAk4zhigm+3W:wHZrxavMgmMiiIo95LLp7roH5migR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8630d58f8fef7e65e3ce34b8a3c93ef_JaffaCakes118
Files
-
a8630d58f8fef7e65e3ce34b8a3c93ef_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 472KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE