InstallHook
UninstallHook
Behavioral task
behavioral1
Sample
43727ab746f14245325f48eec3936806_JaffaCakes118.dll
Resource
win7-20240704-en
Target
43727ab746f14245325f48eec3936806_JaffaCakes118
Size
736KB
MD5
43727ab746f14245325f48eec3936806
SHA1
8f946685dd7e60e368d58b05b2b8fe7b202341dc
SHA256
0199ee93117177bfe53ff75e1e608b6c6502c72e6f24cfe9f5040105a1de1434
SHA512
0592ee035907725c0c8cba4f4af08d994baf43fcdf420070bc52c39e124e4fe79f8c6d1e29e0f0b2fb56fc3727832cdda207aec036596c46d223cac7c491c054
SSDEEP
12288:2cFrzGyJtTLGjVuP/A0R/HwwRiUd8roVByQnS0vOf0kMAYx7YQGodAQs/GQrGEdl:9lzHf6e/HwNASDFMAyFGodAQEtrhLKt
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
43727ab746f14245325f48eec3936806_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
UninstallHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE