HHHH
InstallService
UUUU
Behavioral task
behavioral1
Sample
d3b0d5bfd2be0b3da9901ffa175b611b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d3b0d5bfd2be0b3da9901ffa175b611b_JaffaCakes118
Size
19KB
MD5
d3b0d5bfd2be0b3da9901ffa175b611b
SHA1
bbab1b280ee8f8dbfc31e52013d6c8b8147ea20c
SHA256
4a401b2b5ae60ab93fdc0d31b9623acb298513f9fa84f0e7cc9ad10a702c8cab
SHA512
d40a7bc9b93b75d71ea0fb629d4ea5fb2e2544d5a561951a5edadf951b689964db84820c5673fccefb5f6d0a82114910c54622fc5e5236fd0406724b43a96313
SSDEEP
192:IP1yCgxm4eJgDJQIjN5LlusHNEdubZ+DEF2q0/on56WGgC/oMbIFE52Q/qMXWO1Q:2yxm4eGD793swGB/oFFfQBN1j1smsC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d3b0d5bfd2be0b3da9901ffa175b611b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HHHH
InstallService
UUUU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ