Install
RundllInstall
RundllUninstall
ServiceMain
Behavioral task
behavioral1
Sample
4422da681f3f460fc86fa9ee57fc57b8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4422da681f3f460fc86fa9ee57fc57b8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4422da681f3f460fc86fa9ee57fc57b8_JaffaCakes118
Size
80KB
MD5
4422da681f3f460fc86fa9ee57fc57b8
SHA1
36e0faf9a60387ad0a3002a37f2ea0ea091af770
SHA256
d8818060b365ed6f65500a6be469c2b84985ec98b929b65d43d7a7ef3907c806
SHA512
5c5acda4c59b06f65970c00ef5f94b5709202298c27b1a436c56e678a195ee86c6fc2aac3213d5c9c6f4c6fc8e77c7ceb920d4fa4a7c00125bdbcc594f14ef61
SSDEEP
1536:lY0s66HZaOxcSP+n/ZznToIfDTRUrp2TNTeixp0zA+V/R8zE:O0s66N+n/ZDTBfDTRUrp2TNTei70ZwE
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
4422da681f3f460fc86fa9ee57fc57b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
RundllInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ