a
b
Behavioral task
behavioral1
Sample
f6cd0b96bab4cd9c2ff2bb97c22cca3c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6cd0b96bab4cd9c2ff2bb97c22cca3c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f6cd0b96bab4cd9c2ff2bb97c22cca3c_JaffaCakes118
Size
71KB
MD5
f6cd0b96bab4cd9c2ff2bb97c22cca3c
SHA1
7ebb61fe810a61c3d82ec90a7d191cc9998cd3c9
SHA256
ebf273cd22630616a2c0ea581e5bd7c5cfa7eb26d070e0a00667a93788717842
SHA512
1f808450dc3febdd40560206cc77f3e6adc34971ef42b71a18e5fd0f072bc0800746defff91db54b3fa03d6bcc2805f4bfecc1e72a9c0e937cb5786d58806e5c
SSDEEP
1536:ggmzvvA3TJagyFN0y8G8ZFNiRlAB93yq1e/HSmm0Q0PL:g7vo3T3cd8G83s0n3yqs/3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6cd0b96bab4cd9c2ff2bb97c22cca3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
a
b
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ