test
test1
test2
Behavioral task
behavioral1
Sample
317f9b9ea6731269f1841dc310c590d8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
317f9b9ea6731269f1841dc310c590d8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
317f9b9ea6731269f1841dc310c590d8_JaffaCakes118
Size
311KB
MD5
317f9b9ea6731269f1841dc310c590d8
SHA1
e0bfe1b769ba79e78c3b7ce64a8dd642a0db662d
SHA256
515de60067098818b1b252329a8abf9b01e23b301ebcceef014916bddf0cc9a8
SHA512
fe871337d335e6aa839137da932189ce4d83f12245cb9b428ad1dafb684b364f4f11fff6dc063d79a31a7af8bd5e79e07967420d0cb6e1bc49ecc78951302c98
SSDEEP
6144:Dse1WQrogEhJWHKiUvvUkek36jVsVGPtozTBxE:wlQrUWHKDvZ6jOgozT
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
Checks for missing Authenticode signature.
resource |
---|
317f9b9ea6731269f1841dc310c590d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
test
test1
test2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ