HaHaInstall
HaHaUninstall
Install
ServiceMain
Behavioral task
behavioral1
Sample
cfec34df28fe07d618c17c940deb21ae_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cfec34df28fe07d618c17c940deb21ae_JaffaCakes118
Size
48KB
MD5
cfec34df28fe07d618c17c940deb21ae
SHA1
6417b93e3b30bbdb02b8b1196db1c95f842f0d22
SHA256
6943221d1a0165080dbe0046290582b24898780b20f01f26f79f7e269accf194
SHA512
edc86ee97d659ae9dc52783750048683e006dd4e460eaf4994a3cb1614922c6b876ef19bc1367dc838161add1ccbd83d03dc0ef44515e5440f8da228cb5cf6e5
SSDEEP
768:SVPgc5qvmXCM3tGHJknM9ljQoaiH6lCTqj7RINRrI1Z4SzxQT6xZR1+RjNNB:6YcmmXCM3EpknqkorlqnRkRrI1LzSKZy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cfec34df28fe07d618c17c940deb21ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
HaHaInstall
HaHaUninstall
Install
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE