OnFailure
OnHackDetected
Behavioral task
behavioral1
Sample
c24d37729542df879d2e0bb927f163f8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c24d37729542df879d2e0bb927f163f8_JaffaCakes118
Size
791KB
MD5
c24d37729542df879d2e0bb927f163f8
SHA1
6444a97a23b82657185320ba6d125196c51d0f49
SHA256
3e44e6ba2ac5d642e1d9870cde231c5b9a63e1f6dcacf6097735b5505ab932c9
SHA512
efa60eac62c9cf127110a1533990fa6c760d1e911d232400c257820e7a1b586c6d26e58a0ec2353590f57c880a670aec00bafd12b3f1eb9d5147dafd975bef32
SSDEEP
12288:jLIYQdxyDuu2AQKTevvvAcGks50Zrwm8XT/AfsIaQdT2rncKWPlj8ybBPNhzgu0O:jMPyDcvvgRkPZriTBWTbdAcBFhsu0sZ
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
c24d37729542df879d2e0bb927f163f8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OnFailure
OnHackDetected
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE