COMResModuleInstance
duibi_cpu_dll
Behavioral task
behavioral1
Sample
JaffaCakes118_52eb0e74d7dbd4a22904b59bfce08710.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_52eb0e74d7dbd4a22904b59bfce08710.dll
Resource
win10v2004-20241007-en
Target
JaffaCakes118_52eb0e74d7dbd4a22904b59bfce08710
Size
242KB
MD5
52eb0e74d7dbd4a22904b59bfce08710
SHA1
10dcc6b70e92eb178ce57c0d93e1e307b195d1d2
SHA256
4d48dcdeea40d778e381641b6a40ad47d8194e8cb7b9d1d33a1c180890d44e9f
SHA512
ec37212ea19295f33a0440b20c7c6fe5f14b62780316b7838df853f63cc9f4ba024ed53201f2317d2c41a01864c5a8d1408cb92fa2138c8cfc587ff4023fdaed
SSDEEP
3072:D9K0aay8vVIsskvgW8vkwWD76bhfNpiUp4xoOTWm0QVY4RPA0QNmBryOg/afEnuy:hKwzskXSxwKm5PpA5NAeacR4
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_52eb0e74d7dbd4a22904b59bfce08710 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
COMResModuleInstance
duibi_cpu_dll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ