?dnfCallBack@@YGJHIJ@Z
COMResModuleInstance
UHbabNASBBAS
Behavioral task
behavioral1
Sample
14b4cd12b944b7226b88a7acabf6885f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14b4cd12b944b7226b88a7acabf6885f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
14b4cd12b944b7226b88a7acabf6885f_JaffaCakes118
Size
30KB
MD5
14b4cd12b944b7226b88a7acabf6885f
SHA1
fbb21d53af4e12e9c5a50c59987b3bb7907f18b4
SHA256
c6858d3c149e148af9a04eac6f589a39b706a2e93d84628952609beb85cf388e
SHA512
e435613f93c08ce454b07117cb84b5ff8793e22888350c74225b32d62dea172d86306018eddedaf5a9bf5d4fe41ce4422987067cd0f5b76927b6d16b98408d28
SSDEEP
384:rwYaUkUo/4qGVVLWnR/tsKMRWU09OmBn4s3KWHa3cbXpxcRTy2XGO12WPm9P:bc5RFsKKlzG3DHaQ5xcNX2O12WP8P
resource | yara_rule |
---|---|
sample | upx |
static1/unpack001/out.upx | upx |
Checks for missing Authenticode signature.
resource |
---|
14b4cd12b944b7226b88a7acabf6885f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?dnfCallBack@@YGJHIJ@Z
COMResModuleInstance
UHbabNASBBAS
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ