Behavioral task
behavioral1
Sample
1669b7f5b030ce08e70b6b4f82fa3246_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
1669b7f5b030ce08e70b6b4f82fa3246_JaffaCakes118
-
Size
945KB
-
MD5
1669b7f5b030ce08e70b6b4f82fa3246
-
SHA1
25fb51486c592dac4d440520e05b4cbe2ab09457
-
SHA256
a260dc14dbffd7838d07bce8cc2c8b315239cf668e085cf2283909a1cc857347
-
SHA512
bcc51d4e8152bb2c091178177fd6c7d0d92e9601c0ee6df9a9b727720f3e7ff3442cb4a149cce3e8b32e46fe8526e30209d4df96ab81154c48c164eaaa512117
-
SSDEEP
12288:D7pXHMe2jeKNPeJxkQWt7f+YScCeCODWOYadEALYf5Uyi6LQ2r+RIma3CXj45uWx:D1HkvPerAecCTcWPadDJlymaVuJDS8f
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1669b7f5b030ce08e70b6b4f82fa3246_JaffaCakes118
Files
-
1669b7f5b030ce08e70b6b4f82fa3246_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 322KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 618KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE