HandleIncomingData
Inject
Behavioral task
behavioral1
Sample
3e1c4c939b078bfaa8be4b594c20d09e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3e1c4c939b078bfaa8be4b594c20d09e_JaffaCakes118
Size
624KB
MD5
3e1c4c939b078bfaa8be4b594c20d09e
SHA1
17f1ac0b22ec379780c5976569fdf5ac8d620847
SHA256
750749e4ad1b3d4d32e9d7a2852f98eedc224135f1c9aab466808c46c1f109b5
SHA512
40dd76c8f79451251624f1fda6182d8e1a2ca918b5be6f7b836f5f68936fff05182d76b8b3aefe7e986e80218d6f8078ffb6820edff88a18b504aaf1ee90e13d
SSDEEP
12288:RkpgFimdtzqSBlu38r/96J5gWTRH0q4MfVmlZxZg1WLSN1ek4xzaFRVdJyell2T5:R7+ANr/dWp1HEloWI1YKhyellG0y
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
3e1c4c939b078bfaa8be4b594c20d09e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HandleIncomingData
Inject
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE