__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
3ab8079ea651c55200fe206b9967fb02_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3ab8079ea651c55200fe206b9967fb02_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
3ab8079ea651c55200fe206b9967fb02_JaffaCakes118
Size
8.3MB
MD5
3ab8079ea651c55200fe206b9967fb02
SHA1
6387fafc1db0892e28c858070f88e0d44e2dd37d
SHA256
7b0c3e57c862420fc030ac51712c56421430370a3d15ed3afebad7932c92ddac
SHA512
e19ccaef911720570f6d4e138960358e43627f80076d825cc689120653de9a51fbe640499a0ee697889369313493c848d7ed2d6482d9466b9821f7de5502cd26
SSDEEP
196608:vjNbuPGwmlpCmizrzjxN5wgrCHsFw+xssfZHRk:vjNRzpPsj35wgVmgfZHO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3ab8079ea651c55200fe206b9967fb02_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE