InstallService
wdof
wdon
Behavioral task
behavioral1
Sample
JaffaCakes118_98e55559bf544f9792522047dfa31489.dll
Resource
win7-20240903-en
Target
JaffaCakes118_98e55559bf544f9792522047dfa31489
Size
16KB
MD5
98e55559bf544f9792522047dfa31489
SHA1
246711c58626cf2d7fa60e907bb7c090dd634c33
SHA256
619b6e3c1ad65e63a23be98f9029e08a10295b3b3710c6635f17914ac2fd3657
SHA512
449aa96a3d37b8c13fb80832190a1dd040eaf89668184d4e1d833d137ff8bb4dfc15d624e0ffa1d9db717af37144c0f429a573895bb20b7127c0a9cde8492cf3
SSDEEP
192:AT87CfMixNyK35giWuwEd2SLWVSHKzbgeN3BS3OWoa4v0E3Ftm/bXvn06QfKDRgQ:Arf9xNYPw76DHdU+Wo53F0/bXv0gNHnX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_98e55559bf544f9792522047dfa31489 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
wdof
wdon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ