Huaiiiis
Jiujitsu
Behavioral task
behavioral1
Sample
394c79d24dc33f5dd8344aae736cecc2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
394c79d24dc33f5dd8344aae736cecc2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
394c79d24dc33f5dd8344aae736cecc2_JaffaCakes118
Size
873KB
MD5
394c79d24dc33f5dd8344aae736cecc2
SHA1
3dae53d9ea886b21a2fdece284d8ee5e2059b7cc
SHA256
9468886170b203ffb451c75bccb58950e642b2f2e9e690e0d4b772a6296e51f4
SHA512
c934f1bc6e6f21d3460cba18a36ca3859f9d8d2771f958d45d47143565026b92bf0cc5bd3017e2b7891d49e58252e271a13548c33608ea1cf684540d0c5a619a
SSDEEP
24576:m/9tH940FUJr9lNL3XEAWjNVPa6i6h8GeXqvUYp:mLH94plBHEAojPa6iErc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
394c79d24dc33f5dd8344aae736cecc2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Huaiiiis
Jiujitsu
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE