ISPI
UISPI
WSPStartup
Behavioral task
behavioral1
Sample
173f3d1314e5581165379bc8b499ebff_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
173f3d1314e5581165379bc8b499ebff_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
173f3d1314e5581165379bc8b499ebff_JaffaCakes118
Size
154KB
MD5
173f3d1314e5581165379bc8b499ebff
SHA1
2d415f3e376ee9ba11e64292426ec0b8100ee636
SHA256
2e219a0abbdd1b2c1024880800aaf936a3196bc6ac6f591e7c2e38b2da869471
SHA512
501e61542c337b5a3b99677d0a4ef5dcdab7d07b66e3578de1356fe0f02b23f1ae07cc6376ffcfc18641e06df750d63bd63b962ebbb77e5c26eb884fc24f4f96
SSDEEP
3072:ZdgM9yz9Eq7YkeOMC3bGvKolQae/cOrlBfjjZDH44:ZClz9b7lePCLGvKolKjBt1f
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
173f3d1314e5581165379bc8b499ebff_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ISPI
UISPI
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE