recv
send
Static task
static1
Behavioral task
behavioral1
Sample
wGuard.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
wGuard.dll
Resource
win10v2004-20240508-en
Target
25fef2bfb0ed9ce700312adb9ba71ad9_JaffaCakes118
Size
453KB
MD5
25fef2bfb0ed9ce700312adb9ba71ad9
SHA1
27e3b31b8a8f41b675c4038e773df4d78dc6bdc0
SHA256
4705d2ced1a6a411484ba959bb11dc2c0e7b632b71fa65fc13687fe1103aaa79
SHA512
c543cd4daefd514db9ce3b8ab4ce02f94f920966fe45be6272bc541a5893c6139523d7841fc06d42582f5e677fd650bfa77476afaf153fc899f5e8eb6dafee9f
SSDEEP
12288:J22zh2W6VPFX7lNKtNEPO7Sw/QuPGZSmIypfj9zflT+VB6azvVzl5:PhaXbPYz2wifj9jlaLr5l5
Checks for missing Authenticode signature.
resource |
---|
unpack001/wGuard.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
recv
send
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE