Behavioral task
behavioral1
Sample
a9d885af82c1199f0e3fcc3dd7f81266_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
a9d885af82c1199f0e3fcc3dd7f81266_JaffaCakes118
-
Size
211KB
-
MD5
a9d885af82c1199f0e3fcc3dd7f81266
-
SHA1
7e5aae7438d8f9f4d7a0a4a18cd3dd14287f41c6
-
SHA256
15cf5f02d95e98d86df498b13294896b56a794ca369f2c4aaecf7dff019d7b7e
-
SHA512
9a704744bb98f3a5d9a3e544bfa0d168ec3dafc179c8da9c3da50e682b113a3ca3e3d4b88ab057ad24f8cc6de7bd8cacd4c5e92a2a1f458aa96ade63cbe0559c
-
SSDEEP
3072:Ax+bu1pvmo8vZIHv73MxvtIKzyzQEO9712XIqouL+DISawdu6DfOrTh1FXQ+v:ApCvSHvuFIFztQ71I1m3dzDO9nv
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d885af82c1199f0e3fcc3dd7f81266_JaffaCakes118
Files
-
a9d885af82c1199f0e3fcc3dd7f81266_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Themida Size: - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 211KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE