GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Behavioral task
behavioral1
Sample
f579175cd1b5d40997b99f6866f4cdc2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f579175cd1b5d40997b99f6866f4cdc2_JaffaCakes118
Size
250KB
MD5
f579175cd1b5d40997b99f6866f4cdc2
SHA1
cd9150c047a24d0c765aa4fe6a790bd065e913b1
SHA256
b509f9728c00571d8cdd09a69954f31f422bb4e5ebe157ffcceb438343f4b93e
SHA512
98adc59f367167a0e4431521ecbee7badcf98f7b26eb4aac382e4c853356564da79f528558bb534a76d3c285f4becb0ac8bd3529cd172dc64974c016d502fa70
SSDEEP
6144:f+2g7O+JQ6oDhwSIWnRQJOzGkcJVz3+aYMeGwN:W2UOw9oDQWR29LJ13GnGwN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f579175cd1b5d40997b99f6866f4cdc2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE