XP1
XP2
XP3
Behavioral task
behavioral1
Sample
0ed6c86c5472975d7afb415b7314e7e3_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0ed6c86c5472975d7afb415b7314e7e3_JaffaCakes118
Size
712KB
MD5
0ed6c86c5472975d7afb415b7314e7e3
SHA1
4c4fc0de83a06566f70b2287beae3c6a45beba9c
SHA256
944098ccb868d64b42c958b7c976fa1681cf2b21f607c63cb56d3ad99c7fb217
SHA512
1674824f50a355445ef6532cd55884b4d4e9f3eab89bae7bad437d9eb202735de7b70ad8384045d0b6cf39c71f97cd603320b4fc3de0e863844e929a704a0604
SSDEEP
12288:Ere/MyEsoJ5RLxALE4KcD+eYV6P4vjmT9DG9sifF2ibyz8dxDpZVMddz5d6C+kk2:EEe5RtA44Km+e0gDG9bAYeGVgNdLLkGT
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
0ed6c86c5472975d7afb415b7314e7e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
XP1
XP2
XP3
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE