Install
RundllInstall
RundllUninstall
ServiceMain
Behavioral task
behavioral1
Sample
311b5011095c2e2b08002991a3080bec_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
311b5011095c2e2b08002991a3080bec_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
311b5011095c2e2b08002991a3080bec_JaffaCakes118
Size
72KB
MD5
311b5011095c2e2b08002991a3080bec
SHA1
2d78bfd01887191f1a9d5805e1f4dd7bfbe2537f
SHA256
05dfe3f564c2b61047b03e37464214b08bf796efd1b746772ece840334e75a1c
SHA512
123d836b229f8a9b706933d53a0b67fa25fe8e90941ab8dc843edfd616c106022bbe0a521c80ce4161a47b853eb8285d7150bc12850919fc4c9a3d442c67cb46
SSDEEP
1536:Yr0e+DelaCFc1Ken/wFnToIfHTR7r5JkNT1oHFp0zA+VwR8A:A0e+DAen/wtTBfHTR7r5JkNT1oHP0it
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
311b5011095c2e2b08002991a3080bec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
RundllInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ