RehhcSSDT
ServiceMain
winsafe
Behavioral task
behavioral1
Sample
be9ab8ec727486b2965bfa84d154c4ec_JaffaCakes118.dll
Resource
win7-20240729-en
Target
be9ab8ec727486b2965bfa84d154c4ec_JaffaCakes118
Size
47KB
MD5
be9ab8ec727486b2965bfa84d154c4ec
SHA1
f1a9a78a309c3090f992f203bdb3789bf1fc7585
SHA256
614b46a239b05221d238f78594ad8cb8c7ce0bed3f1cb2713f838e3726eb9706
SHA512
b17ef284ada9784769f6deb7ace5c68a14c48e97e90fd54416bfd566ca8351e05adecd039db5c088c5c0c2d440812b642d2ad25fa4aeb53bd33f0d4a2f6f213d
SSDEEP
768:YV3CbrjEj5J7eXX712NJKwYNkUNhKW9fhcKyFdMKizILny4ngwoU4leqR/2ETacB:YV3YA707GKwRchhJQmJILtngwoUJqRz7
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
be9ab8ec727486b2965bfa84d154c4ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RehhcSSDT
ServiceMain
winsafe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE