Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
2eda6641e3fa59c5ee5a80159142e5fb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eda6641e3fa59c5ee5a80159142e5fb_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2eda6641e3fa59c5ee5a80159142e5fb_JaffaCakes118
Size
1.3MB
MD5
2eda6641e3fa59c5ee5a80159142e5fb
SHA1
4ecad7551fb4dd7d361f37a8417a20a34ec0d355
SHA256
4c5119ce2f4cf112478b4d70e2c2ed8032aba2aa1defa0fbcdeebc2cdd31649f
SHA512
a1390572afcc302947a3fe5f8a65f03704507932530823e78998b681d2723c3aeeda5ff4782c2c0f3aeac615d04853959382c04eaead7cb1410750c6f469de39
SSDEEP
24576:EsKeCPIKvItTrWEkgJs5GiFQa7YkRjwS9G7B:EwKvItTKaGFQJu0B
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2eda6641e3fa59c5ee5a80159142e5fb_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE