sityp
sitypnow
Behavioral task
behavioral1
Sample
232b1615bf67154a9b06d1356290a6d3_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
232b1615bf67154a9b06d1356290a6d3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
232b1615bf67154a9b06d1356290a6d3_JaffaCakes118
Size
77KB
MD5
232b1615bf67154a9b06d1356290a6d3
SHA1
02c14780a3dc56efd8702e54cb5678685c3913bb
SHA256
08d071525e799c6c6669c60ac740f961a037fd81cc736fe576cd71abbf412e27
SHA512
624240b77caa7ba0d5431b21642aeb198f6e6d6cad311a32f9c77c56815b163220d45762dc55447c4e1dac3a4e256b1e475fe8db0588e28614bd6cce5b244588
SSDEEP
1536:KLoR1lA7+kIEnj6ebFvtNfh/RxjbThl1VI6ACaWKWJDWOou+o3:9lASfQhBvjHhl1V+bWJD6a
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
232b1615bf67154a9b06d1356290a6d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
sityp
sitypnow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ