SHGetFolderPathA
SHGetFolderPathW
Behavioral task
behavioral1
Sample
fc7b6f3d39763c44e549cbf50c1046e8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fc7b6f3d39763c44e549cbf50c1046e8_JaffaCakes118
Size
141KB
MD5
fc7b6f3d39763c44e549cbf50c1046e8
SHA1
c35646d900455fd2c151c4d2f05cc1ffb54c2509
SHA256
d186763e5f41cd5d43071c239d5df8eda340581cef013b4926500a29832bfdaa
SHA512
4e100db2afce526d2c99caf80e2f6ce103a9b3858a3bd2e7363a529636b70e7d35cea39c1e18420203ce8061bce0cec3bd4a59a204f3d53c742690082c5a1b2b
SSDEEP
3072:Koutq6OS8DD8RAenjlGvLKFhK+hHnO+nQOtsL25QdZr9A:KoSoDqn5ALmM+hHtQjSEZ5A
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc7b6f3d39763c44e549cbf50c1046e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
SHGetFolderPathA
SHGetFolderPathW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE