ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
009a45a2623e3a595043ec47eb06aa95_JaffaCakes118.dll
Resource
win7-20240611-en
Target
009a45a2623e3a595043ec47eb06aa95_JaffaCakes118
Size
103KB
MD5
009a45a2623e3a595043ec47eb06aa95
SHA1
30f61e4c8c5a88312e4d02550b94de99ec9bc5f7
SHA256
596ec3a0a55e0da71a4f185c979eb1b528f493cdd447a5d08b888d99db73b9bb
SHA512
d2530f49a1905dc1183fa67f3d27d8b91c13c1b3e1d78c9d61d32148ff62d671a26b036be8a4390d01a81ee260458f18b78b5daf2dea2ac9da8b7bbf52a47f46
SSDEEP
1536:THFhnmuXwALxhd7lilGvbcnH6fB18we+VksDWVgZn92cdlC2:LFp3LxhLiEvboH8B18sVksDWVgX2cdlr
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
009a45a2623e3a595043ec47eb06aa95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE