DoMainWork
DoService
ServiceMain
Behavioral task
behavioral1
Sample
bbb685813cb1b772e50d7dd56527548d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bbb685813cb1b772e50d7dd56527548d_JaffaCakes118
Size
164KB
MD5
bbb685813cb1b772e50d7dd56527548d
SHA1
be6364eb786066a669ea28731128e5587536fb82
SHA256
f47a492421e3f61eb81ca13c403b181a3b20e5d73c816ff493b66390ffb6989a
SHA512
c3a4fd1d86e2e906663ed85b14e1416f5161f8e107ecb98169f9cefd219d19c125d36089ebcc8be871e7e1d94d866afefd2736a99b13242f107dd29d8e52d361
SSDEEP
1536:HtndBcgCvI+KOocuI/GuCFRJmp/g4TotPOhr/nEwsu9lcHqOxiQw2/B8CHYYu25R:NndfOxaqGuCFmRToKez/Bf4dQJj08B8M
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bbb685813cb1b772e50d7dd56527548d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE