__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
f5fafe78da20c94f834f92ede4818970_JaffaCakes118.exe
Resource
win7-20240704-en
Target
f5fafe78da20c94f834f92ede4818970_JaffaCakes118
Size
6.7MB
MD5
f5fafe78da20c94f834f92ede4818970
SHA1
ab46cdbe95f80f5ba1a71561bc6db0155102d2de
SHA256
c1d4e639736da8bc7c7e026ba9d7a4d964d59fac41c939b1d5aa0c8452ad1047
SHA512
7f80e41acab86394198bd04c649c490711ffd9a8a6ce320cba776440b421b51be4ec944c67a97308f7b719705c75e77ab12c0d4347d46afa76afbcc0aa289d01
SSDEEP
196608:TE20f+AtSG3lxSesJIK42G3o5tEfUwShTTMg9qd8RV2:TExfFtSmkJIB3o5tEfnShMg4YV2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5fafe78da20c94f834f92ede4818970_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE