COMResModuleInstance
Hookoff
Hookon
InstallService
Behavioral task
behavioral1
Sample
04a1eab5ff97cb5e82bf45bc3e21abaf_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04a1eab5ff97cb5e82bf45bc3e21abaf_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
04a1eab5ff97cb5e82bf45bc3e21abaf_JaffaCakes118
Size
14KB
MD5
04a1eab5ff97cb5e82bf45bc3e21abaf
SHA1
d4dd68164c9bb26db28a07c533c320a075a76777
SHA256
db6dbb32e70748f86d0a7ff9bc1a9ddb44810524cb40f94759ca4ff9b42959b6
SHA512
06d398a2a9c1179302abd8b3d1938373538e7d2ea60152a3bf905367d63b081439b904bfc702f055aa62a89118f4a2ea4d8047363b5fdeb8daad7982188a9272
SSDEEP
384:P7IUcoTac1MqdAkA4C85B5Zvz8lq5/oRQm:jcuSkVCEvgs2Q
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
04a1eab5ff97cb5e82bf45bc3e21abaf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
Hookoff
Hookon
InstallService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ