??0CMelete@@QAE@XZ
??4CMelete@@QAEAAV0@ABV0@@Z
?fnMelete@@YAHXZ
?nMelete@@3HA
Initialize
Behavioral task
behavioral1
Sample
6403f22e92031d1be16c6da3d2139823_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6403f22e92031d1be16c6da3d2139823_JaffaCakes118
Size
1.3MB
MD5
6403f22e92031d1be16c6da3d2139823
SHA1
42c5e5b8d90b319c3805c961b80b9d1ca63a9c77
SHA256
ca2cf1f2d149370429ef8d1ee5dcce1ea907a854c6d5693bfc3b1e25dcb5fcdd
SHA512
ae4d77cbbd87f9224d42bb5c42f3aa4fa6d4c31eee249215df716fd1dfb3923e613d91f7cd41ad69a289426c6159b2d447416ca783eeb2c3da3850c2388748b0
SSDEEP
24576:hls641vbX9sBsn4yVFG4dBQ41xoWk1XF6FicOZCxU4oLF/LMIGvib6Iauc:hWd1jeQxQ/Wg6u/YItb1c
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
6403f22e92031d1be16c6da3d2139823_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??0CMelete@@QAE@XZ
??4CMelete@@QAEAAV0@ABV0@@Z
?fnMelete@@YAHXZ
?nMelete@@3HA
Initialize
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE