DoWork
Install
RunOnce
Uninstall
WSPStartup
Behavioral task
behavioral1
Sample
2c5f8c4133951a372fe0363819a6bb8b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c5f8c4133951a372fe0363819a6bb8b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c5f8c4133951a372fe0363819a6bb8b_JaffaCakes118
Size
116KB
MD5
2c5f8c4133951a372fe0363819a6bb8b
SHA1
bb239b53c198fa30c6c5d58c09a522c68abc317d
SHA256
00a73228e870fa89844f00bcf7dcb9169a66e24761d51f6dbecff7b8b5f44d85
SHA512
937f3f48bec83b8c6f84b5ac7651b6bd89661fd4de60d9d0f45a95c88f3fc6ab9e91be36b83da1c11d7c4260a0fb26971862f8985fbd1344f37a477eaf8ca84e
SSDEEP
1536:TBTR7fpEVTSSPEN/sjPUHcU7ynph0xWlaB:hdGGSPE1sjP07ynph0xWC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c5f8c4133951a372fe0363819a6bb8b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoWork
Install
RunOnce
Uninstall
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE