VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
a26ca3aea7a39bf5ef4243650d752b99_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a26ca3aea7a39bf5ef4243650d752b99_JaffaCakes118
Size
23KB
MD5
a26ca3aea7a39bf5ef4243650d752b99
SHA1
3a78bb4ab0d2461a915b7b8b16247ba42b3436ac
SHA256
0fbe04e1476ba9ad307836991ab51f4a64980972c4fea3c5e0ccdf248693a098
SHA512
2d1382c16406ec5ad7417881100e4b1032ebf1151a839cc45e24a41722e9ffadcf42aafa4c2b47b2cbd7eddd3f4932bddcdfdda8e8ac651e153f307711a8c0e6
SSDEEP
192:lhC3SmRAY4L8PeX+3DVoIn65urOofmgzhm85Y39za/y5slQM9HhuqipSDUat3LnG:KrBrLp55iIa5slPu9gjt3T/O
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a26ca3aea7a39bf5ef4243650d752b99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE