InstallHook
InstallMyDll
UnInstallHook
Behavioral task
behavioral1
Sample
f107d170daba927913aa777777235b62_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f107d170daba927913aa777777235b62_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f107d170daba927913aa777777235b62_JaffaCakes118
Size
480KB
MD5
f107d170daba927913aa777777235b62
SHA1
58ed6aba6e37007d73f73efca3ebea71a09c255d
SHA256
7de608af65b99b881297163cfe3785e7336cd239cead44989e7595caae1d3f7b
SHA512
92842ffdf924663aef7f0f6b68b31c72b6f95d33a225116aa634326e4b9d51cfeb2fe4a11b02c223b704b933b8472dac04332502196e3e018eab93726c1525f2
SSDEEP
6144:Xmu6rqpAG0zr41H8ZDnO7YS90ThCq+MXnwPbCT5oXadxY5/zoyaDdZkDSPkweNu/:Wm0/S7YQq+MAP7adWhcDdg7Nu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f107d170daba927913aa777777235b62_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
InstallMyDll
UnInstallHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE