Start
Stop
Behavioral task
behavioral1
Sample
2c4f903e66bd45a8466a0b7eac842158_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c4f903e66bd45a8466a0b7eac842158_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2c4f903e66bd45a8466a0b7eac842158_JaffaCakes118
Size
19KB
MD5
2c4f903e66bd45a8466a0b7eac842158
SHA1
f2a3427a65bfd3f4b0f9e0dab2040bafb32eef5f
SHA256
edb24eca5ddab3732f82af769a81bdc3a7f4c5fb3f9bd14d7de22b6bb699ff01
SHA512
ae7a2aed49703ea34b656bb59c98ecdc1d73854f48383583eff7df3a3a145ab836d32828cf99bda507204f99da54c7fdaedf60a34957401dc26ac05951b47c6f
SSDEEP
384:UTjIo2vDdb5RCtbG2Eu3B2/g9tmRWN2tfo5CmPP8tKp5Zzz:UjIo2hFRCtbGwBKg9sRLuH8tKt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c4f903e66bd45a8466a0b7eac842158_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Start
Stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE