VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
fd19aab0a7e5cb9d3bfa749a2cfe2269_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fd19aab0a7e5cb9d3bfa749a2cfe2269_JaffaCakes118
Size
23KB
MD5
fd19aab0a7e5cb9d3bfa749a2cfe2269
SHA1
be69ce385754bc1463118b4a2edf054e0d5ef7b9
SHA256
53b53c4744219392e23ef5f3ad7b645cb98886f0d14d5c1e6c1f80dc1fe73f60
SHA512
30ec2f73b1c84fec05c37820d6df313521c6aac7363e43d8fbd47b29d384f068e3473e98f6bb72bf87980868657415f690b7e3de262c1197c6fad59b77384e5f
SSDEEP
192:L1C3SmRAY4L8PeX+3DVoIn65urOofmgzhm85Y39za/y5slQM9H9uqipSDUat3LnW:8rBrLp55iIa5sl7u9gjt3T/e
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd19aab0a7e5cb9d3bfa749a2cfe2269_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE