DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
Behavioral task
behavioral1
Sample
c0c91e2edb1a2d43ef6ca427b3b32e1f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c0c91e2edb1a2d43ef6ca427b3b32e1f_JaffaCakes118
Size
93KB
MD5
c0c91e2edb1a2d43ef6ca427b3b32e1f
SHA1
0a76cc7132aa6803595e9906e5117349c1c7ae36
SHA256
cc8c923a0578bb3e51a868d6cc51b65792644f11bd0ec8b690ee6fccdd96c591
SHA512
bfdd4bd83f17164fbcf5d54fa58ac16f4051c568c2edfd87279861cca1ce8725080851c7838a0f966d49067801a9bd50eefecc3fe951bf459e9b9ee9f79aae8c
SSDEEP
1536:KtizqrFvAS5xFzAOLTivgvPw705RssYJbNLzvNfNMljEfYoZ3ICHCYWmfEx:uiOrBlxFMqMgnw7cIbNH1fNMWYO3VCYE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0c91e2edb1a2d43ef6ca427b3b32e1f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ