cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
Behavioral task
behavioral1
Sample
5b316fca85ec5f4965fbd83e689c05ae_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b316fca85ec5f4965fbd83e689c05ae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b316fca85ec5f4965fbd83e689c05ae_JaffaCakes118
Size
645KB
MD5
5b316fca85ec5f4965fbd83e689c05ae
SHA1
a7e6dd2b61f411ddda275e4fb06e748ae0bf98c1
SHA256
c5d099cf72f666bccf906498f18a95d06bcf956b3614888a94d4c6a96847cd15
SHA512
15f2b0c412a6ebf4555db540715e61376a6931f06598350339d6e8b6b5139a9b4aae0ca55fecbde2dbea9cd48e2eb45794a7edabc0535d857ad06519f829ca4b
SSDEEP
6144:XovdkDe5gg5nvSBgthvWPqQhxpEvln15dlTwndA/t+oRJivtfoS:XouDyQ0WPqAk3q6VnJi9oS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5b316fca85ec5f4965fbd83e689c05ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE