InstallHook
UnHook
Behavioral task
behavioral1
Sample
bcc92f0e002a53b5afdce0ebeb269622_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcc92f0e002a53b5afdce0ebeb269622_JaffaCakes118
Size
588KB
MD5
bcc92f0e002a53b5afdce0ebeb269622
SHA1
e5d60413de9dffb581f9934c82d93faa30d7ff4f
SHA256
e9458fddd2a5f1f7e6af2e3e48dd0b3cbe7754f29beb204669e7d7a9b50018d3
SHA512
b5157ba9191838b6468a76f95f4e5cd66a5507a7aa1a41a662a23d7d260439fce6e0cc5579239fa583921424fec792ff03c34d1aa25fa165c58ab92ed4249f5e
SSDEEP
12288:9/eZcz9kkTMpGrpLvT3O/jKIHKhunYKxWhz8ZnUmhfqj:xe6z9kVQNjOmXhu5Sz8ZUmhy
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
bcc92f0e002a53b5afdce0ebeb269622_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE