InstallU
PluginCommand
PluginMain
PluginName
PluginType
PluginVersion
WSPStartup
Behavioral task
behavioral1
Sample
026848e2cb2a7d8e3ec61b29615c36dc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
026848e2cb2a7d8e3ec61b29615c36dc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
026848e2cb2a7d8e3ec61b29615c36dc_JaffaCakes118
Size
142KB
MD5
026848e2cb2a7d8e3ec61b29615c36dc
SHA1
cd587caf996e332506782290a26b4f058f990201
SHA256
778a3a59b4f133248615c4f3ede4edaddf6932def902e1e0e45ccc40b0a8bf03
SHA512
73aaaef62f6fb74c17a39b933322d705fe735e8dcf4ee2483cc47d4edf55478f36d3f159c59b0eb9689b0c275141b26b9c08596d8276f81aa0f6dcb6f4f319af
SSDEEP
1536:qOpsq+0SA5EBURSusEOuOWUTStn8H8hw1dgrkCm2QC7rsW8faajk7ek0joIy01q:qOq0SEZ1jZOh88H8hw1dgAfs7rXI6E
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
026848e2cb2a7d8e3ec61b29615c36dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
InstallU
PluginCommand
PluginMain
PluginName
PluginType
PluginVersion
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE