InstallHook
UninstallHook
Behavioral task
behavioral1
Sample
dd3ae8b8c7799a4a9f66fc717a5711ad_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dd3ae8b8c7799a4a9f66fc717a5711ad_JaffaCakes118
Size
816KB
MD5
dd3ae8b8c7799a4a9f66fc717a5711ad
SHA1
168b32132f7c6ccd03017985995decee38eeeab7
SHA256
9228b3e2e17be8429cb76589751a582228439a69f316321dce15531112e2524c
SHA512
21cb5c0f5a009565e682c17022c9abcd1d53e51120461bd2b1288c450343f38cefa7263e410ae4f3995f9aa7faf6c6ee3fa02302ecbf348e2780a30fce3bff6f
SSDEEP
24576:0M5lBmq3mSNzq34CbGIrUP7mle8kOjBR7:0oGae34Ogi/BR
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
dd3ae8b8c7799a4a9f66fc717a5711ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
UninstallHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE