TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
Behavioral task
behavioral1
Sample
3125db7cf3000e6336743773ccadb45e_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3125db7cf3000e6336743773ccadb45e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
3125db7cf3000e6336743773ccadb45e_JaffaCakes118
Size
945KB
MD5
3125db7cf3000e6336743773ccadb45e
SHA1
af10135f9b4143997b8d1c4ccf55dee64d745061
SHA256
6dd90fbc06b03d73a9bde2a343540993fefb7b7123483922defc0272cf6ee05c
SHA512
0b686203b54f8fe46e2cee7d3b3c063b582386a04fd79bc5ce5a3b5582018f15db3d405e70a9ca055ab88f8aecebc3902a6d49a80dbb2ded372310d1a80d9210
SSDEEP
24576:KtE8wsC5inKOYXDUnBwfYb5QvFEIY2ucmzyw26Cf4:KTLs1wos6cc0269
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3125db7cf3000e6336743773ccadb45e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
euefnaiw
gusiezo3
hitit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE