sityp
sitypnow
Behavioral task
behavioral1
Sample
0c78a04adb2c0b168cc3624842588959_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0c78a04adb2c0b168cc3624842588959_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0c78a04adb2c0b168cc3624842588959_JaffaCakes118
Size
77KB
MD5
0c78a04adb2c0b168cc3624842588959
SHA1
c4c5ccbf895262780fd877f7c5b000fed3614c67
SHA256
81eae5efc957e2b05d4c2c122c3e81dceba0f1222f4eef2eb6b5d5049a81474f
SHA512
64ab19a88e4dd3c9dc5a315b24f1405c396e873396561d2163b8bc448ca076a8a680437b4c05568b20858bd0405bbc0fa1f1ee647720de9ff088eae09ff7fc5f
SSDEEP
1536:KdSsxhbhc4KlwV+iIm+FMAx4biDoR4TS+J3mAdDj:2xWlwwiIm+yAx4eUsdBv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c78a04adb2c0b168cc3624842588959_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
sityp
sitypnow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ