ISPI
UISPI
WSPStartup
Behavioral task
behavioral1
Sample
3f063e0b4deda10b88d07d0a3ef474db_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f063e0b4deda10b88d07d0a3ef474db_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f063e0b4deda10b88d07d0a3ef474db_JaffaCakes118
Size
154KB
MD5
3f063e0b4deda10b88d07d0a3ef474db
SHA1
e2e008720b4256c2ac5f6a39ae046d0e240af606
SHA256
d33f89a046cd5748b8ff5031b44498cc86a88abb4b45d0cc886f40a842cc10b9
SHA512
9b8700585b8cabcd36d84fac6612f267f7820f63a06e3dfd6e1ebdb0527841b81ddb49aabff9bdb282fc0744b02c01fdf9fde98ed77ccd756c40101988f44bb6
SSDEEP
3072:/dgM9yz9Eq7YkeOMC3bGvKolQae/cOrlBfjjZDH44:/Clz9b7lePCLGvKolKjBt1f
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f063e0b4deda10b88d07d0a3ef474db_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ISPI
UISPI
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE