mymain
nomain
Behavioral task
behavioral1
Sample
2fdb725ed3fd5aaaedf73aa6cc6cd4ee_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fdb725ed3fd5aaaedf73aa6cc6cd4ee_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2fdb725ed3fd5aaaedf73aa6cc6cd4ee_JaffaCakes118
Size
30KB
MD5
2fdb725ed3fd5aaaedf73aa6cc6cd4ee
SHA1
33aec47e232c4a45eb903796753453d8d0b563c4
SHA256
1e7aae4f187c63c9b8b9f38009751650074873e061b3926a765ee79638c2939b
SHA512
cbbabf19bf59d09291aac4ce20797c0d4275acc2244393f29dbb1dbed0e3af54c3c0657da33ef73cfb85b7294dd1488a06867d6869d9430db94cefc9fb5c2a04
SSDEEP
768:D7Kbafjo2EskwUtZa+uCOoghIvdVvJ4WbMWaSmQCxZekyUxEBctiA:D7UyjoJtkT5ozvJLbMaRCxMx3A
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2fdb725ed3fd5aaaedf73aa6cc6cd4ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
mymain
nomain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE