sityp
sitypnow
Behavioral task
behavioral1
Sample
3bf2a482fa33482fd72919e35e0159ef_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bf2a482fa33482fd72919e35e0159ef_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bf2a482fa33482fd72919e35e0159ef_JaffaCakes118
Size
78KB
MD5
3bf2a482fa33482fd72919e35e0159ef
SHA1
0421ab0444357922dd70164227b6bafd3d4bf195
SHA256
c98828defdedfe22830f35f9c759f692271de574e392d108f0a76f5228e77f1c
SHA512
7ec2d335da38ee7e8965ea721c7e829cf20b03fe3b6a123c6d804e74c7dff0edec6a30e6f01212ed260cd8cfda64d83eabc81e63a1492d6b2be73b03a09f4913
SSDEEP
1536:KmVZZKlsoudLei5o5jYtLxRI/MKmTogDa2YT6G0m+f6fss:F97IiSY/q/MK4tPY70Zifv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3bf2a482fa33482fd72919e35e0159ef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
sityp
sitypnow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ