CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
i
Behavioral task
behavioral1
Sample
3e8fd176d6cfc4bd8d507cdd957e1586_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e8fd176d6cfc4bd8d507cdd957e1586_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e8fd176d6cfc4bd8d507cdd957e1586_JaffaCakes118
Size
13KB
MD5
3e8fd176d6cfc4bd8d507cdd957e1586
SHA1
f8d500e8ebce933774ee19017b352bae8108b96b
SHA256
a4564d8ef81c21f28d5de09b8819ac7e9717df9750fbbe0cf70565ebffbd3e37
SHA512
5755a477ca350e355e737135b9c084c7da16b911a467bc7d1525f3c6932bb166260e68a54b315c470f891cea2107a455d7e373e5dd206b96d699df28847fd254
SSDEEP
192:R4cij6Vw/69hl8jRvHvwJrFpaIAfksbaAmSzWrF/6yJwO6MTrsYpzrPaRd:R4cij6tLCd/vwJSIykOnlWYyCUTSR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e8fd176d6cfc4bd8d507cdd957e1586_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
i
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE