Func1
_DllMain@12
Behavioral task
behavioral1
Sample
b67bc0b5bbe2b404e72362d766e2c0ad_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b67bc0b5bbe2b404e72362d766e2c0ad_JaffaCakes118
Size
876KB
MD5
b67bc0b5bbe2b404e72362d766e2c0ad
SHA1
7dd783e79d68e813babb16e8235711301db652a4
SHA256
739f1e5baa22bd3435dc1f53cb1f42eb10afc69d8967ea7fc33fb211306d6ccc
SHA512
1528e4aabdb80259cd6b89fca81ca6d3a4aa066f628c33c12afa6db422bf0b307869ee5c2cdff2cb1a281bba04cb6490f4dae2b1fb4d34fce61bf81a4b0f5a04
SSDEEP
24576:d9bZtw12vN0BYRnLUbIASzt7JmTqdTAbbH9k/OCOURGwJ/0r:IQKB4LUy4sEPHm/9pGc
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
b67bc0b5bbe2b404e72362d766e2c0ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Func1
_DllMain@12
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE