DllMain
DllMain@12
Behavioral task
behavioral1
Sample
099d65c8bf85e45d6504909c5f238511_JaffaCakes118.dll
Resource
win7-20240903-en
Target
099d65c8bf85e45d6504909c5f238511_JaffaCakes118
Size
648KB
MD5
099d65c8bf85e45d6504909c5f238511
SHA1
a354307a2b9466b5fb282831421465a840992ccd
SHA256
e66b4362cc6350b698a1ff2b741e60a4844a40c863b88f4333951bf3323bdc54
SHA512
f9e73267628e5d9832bf66902fcd613814e5fa8e53ddfdd421eb4006376efe938c88aaf5756ff855160c3f51318f7c1a575b2bbbfdfdf7bbd6edafdd5fa92e12
SSDEEP
12288:KDFJW5buJPE1YoY3KSOEzRIrFO5dltuAkxnP/hmlf02/yP1RaiDGZ+Qp:KDFvC5KaYdltkG011HGZ+M
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
099d65c8bf85e45d6504909c5f238511_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DllMain
DllMain@12
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE