Activate
DllActivate
Install
OnUserLogon
UnInstallMsg
Uninstall
Behavioral task
behavioral1
Sample
45e1a1922e7c824a44927f7075e1732e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
45e1a1922e7c824a44927f7075e1732e_JaffaCakes118
Size
134KB
MD5
45e1a1922e7c824a44927f7075e1732e
SHA1
e656363c75a5b781dbdf6c635602b600b9030066
SHA256
1bd306d26c3bdce0f21932226a4da22236c98264d438928b28523ffc00f94575
SHA512
595821ff23cc9e353e899b20bd78305245f1a9472d2cd604102936d9a475523bdac86aa2b931c92a1e10dbeeb4b353d99be8e828363a5e21a132a0e15b9db76e
SSDEEP
3072:W3VFUjFHsqfdurE/t5+yobXRYK2qDrUD85:W/UjJsGd15+jv2qn9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45e1a1922e7c824a44927f7075e1732e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Activate
DllActivate
Install
OnUserLogon
UnInstallMsg
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ