HHHH
InstallService
UUUU
Behavioral task
behavioral1
Sample
a2f8dbcac504ead685cb0f5164d774f6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a2f8dbcac504ead685cb0f5164d774f6_JaffaCakes118
Size
19KB
MD5
a2f8dbcac504ead685cb0f5164d774f6
SHA1
95cce30173a29f9e2f80b333840d5e79a6ba286c
SHA256
bb29606b610925accca3e18286c4193c5ae08194f89fd7f5b5c0ebd9a18ee18e
SHA512
b370492df1e9e609981ba3cf839d7fedff9831cc8bdef6dc00e0fc5861413b519f4a12ed08694dbb97f979fb474906bbc6d8225e6f407ce9646be2c5cf16f320
SSDEEP
192:IP1yCgxm4eJgDJQIjN5LlusHNEdubZ+DEF2q0/on56WGgC/oMbIFE52Q/qMXWO1o:2yxm4eGD793swGB/oFFfQBN1j1smsCq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a2f8dbcac504ead685cb0f5164d774f6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HHHH
InstallService
UUUU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ