InstallHook
UninstallHook
Behavioral task
behavioral1
Sample
6291089ed2e50ee5df2dde1831359685_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6291089ed2e50ee5df2dde1831359685_JaffaCakes118
Size
760KB
MD5
6291089ed2e50ee5df2dde1831359685
SHA1
bb63b9e4e1ea361d18cdfbcad4a01003d581ed67
SHA256
5b98dde76f0bb3ea7232aba2f6bcdc3bedfa2e33704ec8b8ee88466f54df0fa8
SHA512
e1fe35b1e0b8e61303b7e617387284b42ed9e7940f1f35e20d0b1a63ee7b9b1c4a1cfb10206f3d85175b1595c21c588a6563f393fa5526d098a7b81ccfa195f7
SSDEEP
12288:fufHapRt5S669isY89xm46Czc7FfoKgB6zrDnGo/61O2a+6WbnXNXxJyUI9Jxmpq:W/avC5R99Q4pkFft26z30Y/+XXRY9jmc
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
6291089ed2e50ee5df2dde1831359685_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
UninstallHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE