Install
RundllInstall
RundllUninstall
ServiceMain
Behavioral task
behavioral1
Sample
3ab78d3be8d0e8a3806336bee6597523_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ab78d3be8d0e8a3806336bee6597523_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3ab78d3be8d0e8a3806336bee6597523_JaffaCakes118
Size
73KB
MD5
3ab78d3be8d0e8a3806336bee6597523
SHA1
6cef009472e5bb56c7524be35e62dad307f593a3
SHA256
ad81c193148adfdbcde4c1b29d32dd9401c80021817d80bc77906bd137fff272
SHA512
d41446944746e2dcee2e2355602a73488c5ec5ebd43ee0ba0907c2fcb1bdd3a5eef3ef935fb05bdb5857b61bda5bff5a2e6e2cc19d03b2d30a854c16e438e879
SSDEEP
1536:dd0s+S3laAGcdKen/wFnToIfHTR5r5J0NTeiFp0zA+V/R8:X0s+Ssen/wtTBfHTR5r5J0NTeiP0Z
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
3ab78d3be8d0e8a3806336bee6597523_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
RundllInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ