Behavioral task
behavioral1
Sample
432755129982d6758fa89264e8feee6c_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
432755129982d6758fa89264e8feee6c_JaffaCakes118
-
Size
699KB
-
MD5
432755129982d6758fa89264e8feee6c
-
SHA1
cba1a9176c34ef77589694c69ba3a079292dcad2
-
SHA256
b4d4dbc6f326190585562f8eca2f9f626c9bdcfac5b65032a56ce6267c73bcdb
-
SHA512
346fedd08f2542547d180917435eebf5c41099b0bd810b2eaa78e3b1f7f6f3851dd23292e1069cc45b27d8677eb547dffb8d9ecc39f78592b9b3b9449f0179c6
-
SSDEEP
12288:hLxJKgh0NOB/3zYaHkqYzNNZi39/GpWG6++o/R/okMRCHl77dmRMFn5a09dZ/c87:hNJZhMOp3zHXYzfZittuh9uejmRMzN/D
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 432755129982d6758fa89264e8feee6c_JaffaCakes118
Files
-
432755129982d6758fa89264e8feee6c_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 92KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 602KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE