Behavioral task
behavioral1
Sample
ff905a5390a8cd919fc8b7e35f8b1d3d_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
ff905a5390a8cd919fc8b7e35f8b1d3d_JaffaCakes118
-
Size
47KB
-
MD5
ff905a5390a8cd919fc8b7e35f8b1d3d
-
SHA1
672742fb51cfd80906d411b8ff5365273339eec9
-
SHA256
2d7af3cb1b7711040a23e430b1783c090d85a75c42d90ae351f44b715e3fe778
-
SHA512
8338564d60515ec14a38fb0d5920922564057821994af220123339ef578e7754c8dc9ff75a37ee2c4aa75c08f9745e1647897c1a19f89966916b96bf87946f91
-
SSDEEP
768:+gLeIh0FkkD/mrhIq5BVh9SuDTx+hdBQzMDyx6jysDsz5I23Iib1EX0DT325T:+5IK3aFIkBVzLEQNkjQtCG2N
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff905a5390a8cd919fc8b7e35f8b1d3d_JaffaCakes118
Files
-
ff905a5390a8cd919fc8b7e35f8b1d3d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Themida Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 47KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE