DLLInjectedAdd
DLLRemove
Behavioral task
behavioral1
Sample
087933b4031c26c85d35bce4a4899263_JaffaCakes118.dll
Resource
win7-20240611-en
Target
087933b4031c26c85d35bce4a4899263_JaffaCakes118
Size
744KB
MD5
087933b4031c26c85d35bce4a4899263
SHA1
37e837fb8451d6916de063cca04ab5d07d51e660
SHA256
1af3c9803c3b3311e34a2ebfaa31cff34e9fdf1c2e784f897726cddd67dd11f0
SHA512
edfdbbac9a69e269db170055bab1211f216ac8899424ab744fc716eaa51393b4303706655388d6e3a8748d16bf4f251948365e5edc549c9f2754a62849558a7f
SSDEEP
12288:XCawVzYKj86sdhOh6tO8gvwHdyujeW3zUe5+L0/5NOSI4GvpEHUumNlttxcMQp:XCawpYO0O4t/4MdyyUe5+L0/TOSiSHYi
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
087933b4031c26c85d35bce4a4899263_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLLInjectedAdd
DLLRemove
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE