Install
OffEvent
OnEvent
QueryStartSequence
StartFoo
StartMain
Uninstall
Behavioral task
behavioral1
Sample
3b792ebb91cda8e3a26f3a32189cc689_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3b792ebb91cda8e3a26f3a32189cc689_JaffaCakes118
Size
247KB
MD5
3b792ebb91cda8e3a26f3a32189cc689
SHA1
fd920cc190aa0a003d6b37ab4c8d594b6e63efaa
SHA256
54a1f9b42021417624c48c597afaabbef7ec054945c9f91a82f6c8175032f7ac
SHA512
51c17cbad8cb963e248a51c08f65b2c2fb4f4a0eb3e45a92937d1b4f363b579789f9a19879c7fb532f39ca5da8316e07fcb0035809806a9ca8742455548df456
SSDEEP
6144:noSkWoIj5mmXZwYmmz/3yTHFb6UZRaNdU+:nto3mJxjz1UZkNdU+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b792ebb91cda8e3a26f3a32189cc689_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
OffEvent
OnEvent
QueryStartSequence
StartFoo
StartMain
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE