DogShow
Behavioral task
behavioral1
Sample
44beefc75ee72c796fa6284f767371c1_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
44beefc75ee72c796fa6284f767371c1_JaffaCakes118
-
Size
558KB
-
MD5
44beefc75ee72c796fa6284f767371c1
-
SHA1
7797099bd7b46d610d7bcbc737322c8be3c7da18
-
SHA256
9f95d124c6ee3d1b146c0ef19d1cee633a68dcdad41526c74a66ee4b8477e191
-
SHA512
43672c8e7656f143d5b87bed8d75ddc21ae59eb241597f7fa89b473c0afb99be18185273a0dcba1b44d14b189b16317e1a7985a819079bbd442d08727bec613a
-
SSDEEP
12288:1c5Q4Oe9KUua6/uYpc3yB5MrLejOis7LBt8X1KH+Wp17d//JC+j+kTh:y0e9KU7guYwybMryjOis7LBt88H++7dz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44beefc75ee72c796fa6284f767371c1_JaffaCakes118
Files
-
44beefc75ee72c796fa6284f767371c1_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 547KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE