gimp_module_query
gimp_module_register
Behavioral task
behavioral1
Sample
759154b09b4e97edf5f58c33cc9220ae_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
759154b09b4e97edf5f58c33cc9220ae_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
759154b09b4e97edf5f58c33cc9220ae_JaffaCakes118
Size
9KB
MD5
759154b09b4e97edf5f58c33cc9220ae
SHA1
c83105797f6953f581c77be97cf5f99ee59eb310
SHA256
9c54efd18298e59b6545ea840f7d9003bf072c85cabda065e28ccb9434797661
SHA512
c86b5d618bdb75a27a8163d45cac704437cde754dca2a60f22668892ef7c571ac05a04a0834ab1094edf8d132fb3be815347b7ef60d78d186b8b9aa7b0373625
SSDEEP
96:cjOHcQiBlXp1qWa1ONtQ2m8mfFWBe/6mIo:057BlXpdIeQ2m8mfFWBs6mI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
759154b09b4e97edf5f58c33cc9220ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
gimp_module_query
gimp_module_register
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE