Jiujitsu
Kukakkei
Behavioral task
behavioral1
Sample
a4997fc9948dc3e0d63fe36ed09063d6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a4997fc9948dc3e0d63fe36ed09063d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a4997fc9948dc3e0d63fe36ed09063d6_JaffaCakes118
Size
867KB
MD5
a4997fc9948dc3e0d63fe36ed09063d6
SHA1
b2f258fbe321b266eff60f7d2a8683bf07c7bd34
SHA256
e86c2193492459026a8e2dd5e341ada7679fb7c819c2de8f437392c5f50ed052
SHA512
43802e242ec8afbd693c914e31f7a939882391e1b7252a8f925586132851491467252f12b50f1e7a3e272f8eeacd84611afe638602258298624081b1e5bd719b
SSDEEP
24576:i/djifabNbQahynQ4HZ81jjbp3Lw5JCkBu:UdjifabNB8nfZeTp3LT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a4997fc9948dc3e0d63fe36ed09063d6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Jiujitsu
Kukakkei
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE