CreateHook
DeleteHook
Behavioral task
behavioral1
Sample
310b1061183f965ba0bed38f19be7f8f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
310b1061183f965ba0bed38f19be7f8f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
310b1061183f965ba0bed38f19be7f8f_JaffaCakes118
Size
9KB
MD5
310b1061183f965ba0bed38f19be7f8f
SHA1
4cbf118222f3d075da7615079a9ea315657ebf9c
SHA256
a9934249eadafb6388b82e60d386186ab4d6076a769e650ed3a67cad54bfb21e
SHA512
52b7b4e9b0783b5c3952917541296df2edbc44bdd1f6fb3bd9d1e64618a334a7ec3d91b91d40fd4c895e5209900e85d92c58cda0dbc340e3cc12493e8c58223d
SSDEEP
192:B0o8bANWimqffUdj8aKWc7D+MGLZ472rqpmm8ZLZQ1/5IOOov+SiAdzSEAg1Gc+:B0DbANWgfyj8gc7DFYZ4arqpmXZLZQrK
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
310b1061183f965ba0bed38f19be7f8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CreateHook
DeleteHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE