COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
3e89e7c1cef6ff42310e6f3c57f5354a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e89e7c1cef6ff42310e6f3c57f5354a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e89e7c1cef6ff42310e6f3c57f5354a_JaffaCakes118
Size
64KB
MD5
3e89e7c1cef6ff42310e6f3c57f5354a
SHA1
70bb1fe1f98887358fe10be525d2fb1996432502
SHA256
93d1521b10066b0c943ad9d233da696426753fe2a53f8e6deef4c88b0356e20b
SHA512
9f53d7462c77fad94a989d3e888aed1b47cceaea6b1ad5d9bfa0d882012a8f784d5427428292f231389947d8927bcae7a816a7da087c4e0aeb790eca849dd06a
SSDEEP
768:qZD2GY4wI7asdT9KVqylbAYCmXl0n+X8ZUha8WNQfTS0QuqDxs:wb97asdTwVplMqXl0n+XoUgQffQuh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e89e7c1cef6ff42310e6f3c57f5354a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE