InstallHook
UninstallHook
Behavioral task
behavioral1
Sample
b96345d1e753db952bd172ade274b9ed_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b96345d1e753db952bd172ade274b9ed_JaffaCakes118
Size
556KB
MD5
b96345d1e753db952bd172ade274b9ed
SHA1
bfd9d1a1d7c13e0dc80c4ed282e7397ec2c02b5e
SHA256
fbe812c3fde9d5d7d0c5483a25f1ce82dd46af5be51ccdd5ee64112df1a32bcd
SHA512
077338ecfd8aebd80027e1abf9a4d3291d4dd9ae69294c0031d6230b608089279d45e7714469b7730f08e774574fcaf2779c52b56a30260b7ab155f72b8c7c57
SSDEEP
12288:k+AslUe6cwiU0zVSN792jv8/1ulsw8J5WEfAC/5KYnL:/Asluit27476w0WEfA8L
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
b96345d1e753db952bd172ade274b9ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
UninstallHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE