JustforFun
JustforFunA
JustforFunB
Rool
ServiceMain
Behavioral task
behavioral1
Sample
22bed928bf029fddaea6bf5ced2e9274_JaffaCakes118.dll
Resource
win7-20240508-en
Target
22bed928bf029fddaea6bf5ced2e9274_JaffaCakes118
Size
94KB
MD5
22bed928bf029fddaea6bf5ced2e9274
SHA1
85d1bb3e9d7ff1979ecb6041da18cb73eb2c501e
SHA256
eb92c9e23a78da6b15373817a0281bc25d265292aa4c15029437d08cfe20e31b
SHA512
8b6811cb0156a397e5e124d38cdcf521dc09d5f94a91def6c4c0929e31f1138da6dd87f13556d6a11a205da7887693cca645e6110dd99312ab28b23b77285991
SSDEEP
1536:IKZgP4j8SuMgCGqP84AUUcjPvHRcRWHqqcNwrfT5GgB+mTw+AprB:TZgP4buMPv84BUgHGQKqGw7Tog7Tw+AT
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
22bed928bf029fddaea6bf5ced2e9274_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JustforFun
JustforFunA
JustforFunB
Rool
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ