_FillWaveFormatEx@16
_FillWaveHeader@16
c_APEDecompress_Create
c_APEDecompress_Destroy
c_APEDecompress_GetData
c_APEDecompress_GetInfo
c_APEDecompress_GetTag
c_APEDecompress_Seek
Behavioral task
behavioral1
Sample
4e16ca6d9bb8099a18d93260e32bc768_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e16ca6d9bb8099a18d93260e32bc768_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4e16ca6d9bb8099a18d93260e32bc768_JaffaCakes118
Size
169KB
MD5
4e16ca6d9bb8099a18d93260e32bc768
SHA1
eaf1912709595b37ede644e9b3b722ee32c2171b
SHA256
9a4acb3f5bc2fb611b445601f6bab927b6448713cf52cd77a985434148da9597
SHA512
9c761fe12f9f256d355cbd849a93b07c45f457e637a71d5f7799e011ec4d72539c2bf1a7a76b56fe0e21be634f2e4c8b74ee5acb775d6f4f1a32ca21e5a6ef74
SSDEEP
3072:vXkHgL1u7Q1WakrWgso3SD2m1SUm23DHO5OBwa8Gxog:Pk+1H1W1rso3SB1NmSjOJa8Gx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4e16ca6d9bb8099a18d93260e32bc768_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_FillWaveFormatEx@16
_FillWaveHeader@16
c_APEDecompress_Create
c_APEDecompress_Destroy
c_APEDecompress_GetData
c_APEDecompress_GetInfo
c_APEDecompress_GetTag
c_APEDecompress_Seek
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE