GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Behavioral task
behavioral1
Sample
18434e37b2b09641d7be4e6951c99800_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18434e37b2b09641d7be4e6951c99800_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
18434e37b2b09641d7be4e6951c99800_JaffaCakes118
Size
192KB
MD5
18434e37b2b09641d7be4e6951c99800
SHA1
c67831c1a71a6626d6424473e782015e82a0eacb
SHA256
0a679c7e4faf895a6e1a7300a8cea8a13f95cc3fbb88fdfb014a654c5f552999
SHA512
9efa2c718dcb69d8c7752c1de44a6a10d9cf5a67191cd9f042137c3d6f4a48d87ee7ff7872badae3aff5f183e2c0b48ec5b0981ecfd976aba6cfbba7077751da
SSDEEP
3072:2W9n88grQ6udDhwVciX1W33RQJOzGgLHjc3CfCHTb4lII+LOw3zyQ9T8MHRo3nGO:83Q6oDhwSIWnRQJOzGkcJVz3+aYMeGO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
18434e37b2b09641d7be4e6951c99800_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE