CFpzHook_hsm
RunDllHostsallBpoC
RunDllHostsallBpoT
RunDllHostsallBpoX
RunDllHostsallBpod
RunDllHostsallBpoo
RunDllHostsallBposoo
RunDllHostsallBposq
RunDllHostsallBposs
RunDllHostsallBposz
RunDllHostsallBpot
Behavioral task
behavioral1
Sample
2bd4c7d7305ee93375c4b8c05d7e6b35_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2bd4c7d7305ee93375c4b8c05d7e6b35_JaffaCakes118
Size
1.7MB
MD5
2bd4c7d7305ee93375c4b8c05d7e6b35
SHA1
c1b91d02e5898b9993554c89d977b7dbb6db4e77
SHA256
b6215359726de20e7550e55aa920657e5fd4b0c27c5ef46d0d3da88c4b709147
SHA512
12fd0475bf5b3c2f29866ad7e76b8eabffd5eddfc0dd44ea8ac41814328d22a9bf368fb1c9c3f72fc02b8601e193149ed8669d0efcc63b9dc6f64cf9b97457ee
SSDEEP
24576:1hskzO5LRScpq4wBN2aMRYUtl8k9BIFuX5IaRDqYz9WfLgA/l:1h2RDvaeVl99Eat/vCl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2bd4c7d7305ee93375c4b8c05d7e6b35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CFpzHook_hsm
RunDllHostsallBpoC
RunDllHostsallBpoT
RunDllHostsallBpoX
RunDllHostsallBpod
RunDllHostsallBpoo
RunDllHostsallBposoo
RunDllHostsallBposq
RunDllHostsallBposs
RunDllHostsallBposz
RunDllHostsallBpot
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE