Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
325c74f63cf993014e401a8b55f2521a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
325c74f63cf993014e401a8b55f2521a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
325c74f63cf993014e401a8b55f2521a_JaffaCakes118
Size
232KB
MD5
325c74f63cf993014e401a8b55f2521a
SHA1
49421fe9555d960bbeb1e1a2ada17195fdf3b95f
SHA256
d335fffc765af04fe60a334d420037bebcf92787730a57eea26975ee93f59834
SHA512
1256776ab80a2b576c302a1a31523de43120cf289c79c2e53a639603f9ac09346dfd1203bd7f8aecbc577f417412495b04583717fa927e839a5122b221723594
SSDEEP
6144:gOtQsd+pxnkX7r9fRVmQv1yy9GcPI2ypr3lEDQN3I8Iy4LE:gjtkX7r9fbf9jQ2+r3mDQNGT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
325c74f63cf993014e401a8b55f2521a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ