A6F86D2D67D9403eA725820C4EF210A2
A6F92A92B69B4082AB0F9C7A9C1FF10C
CheckRuntime
EC1DB9C1620C48588C4701045B242FA9
GetCpuID
GetDiskID
GetMacID
MainDLL
Behavioral task
behavioral1
Sample
fbe091587b190086b44a28cc4564d741_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fbe091587b190086b44a28cc4564d741_JaffaCakes118
Size
700KB
MD5
fbe091587b190086b44a28cc4564d741
SHA1
56e0502bd32961c550d58a28a94dc54b38f7ef65
SHA256
3d10c674096e04f28e0e3fd47a6a1110e5334709b2a60dfd625d80016256c66b
SHA512
012ad8ca0a394f3a792d132a552954f9accb89111a72ee261a5542279f0c67260fce3f69778a39a29f1af3ef6f76181b4a2055b6789dd8c701ccce0d92965e8b
SSDEEP
12288:pu0C6Dj3ghJzYjve/QH7D0LtXaU6J5N33h3l9UaB/AGz0igPKxQryUpmEqOVtS:puqSw4tL1bk33lVCGz7VxKmEqStS
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
fbe091587b190086b44a28cc4564d741_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
A6F86D2D67D9403eA725820C4EF210A2
A6F92A92B69B4082AB0F9C7A9C1FF10C
CheckRuntime
EC1DB9C1620C48588C4701045B242FA9
GetCpuID
GetDiskID
GetMacID
MainDLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE