ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
3b182484f26bc11e7f4fe84a2d5d5f9d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b182484f26bc11e7f4fe84a2d5d5f9d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b182484f26bc11e7f4fe84a2d5d5f9d_JaffaCakes118
Size
96KB
MD5
3b182484f26bc11e7f4fe84a2d5d5f9d
SHA1
9877f74eafc318aa46ba73b8fee1ef3278176fc1
SHA256
98e7357bc9ee3d763d13fafdac6ed7e2d664202fdeb1424f853745c632a21f7b
SHA512
aadec434f3473a228b4905d06b075adc3eddf4dde1b8b8b117d2f1b442f097bac4cd507d5f2c5a29f4fd71c6bab18b4581a4a712ae69523c22f6f61ec513af80
SSDEEP
1536:WUaLGC3j/nrX7if/H+D49ZbKlMy3Z42AjceAmxCEFcj1mxg6g4IHu5ETV5Np1S4Z:6SqfiHbKlMymjceAGOyipT7NpoHI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b182484f26bc11e7f4fe84a2d5d5f9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE