Bull
Byron
H9922
Prep
Static task
static1
Behavioral task
behavioral1
Sample
41c92a468310eb34628734deef9fc8b6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41c92a468310eb34628734deef9fc8b6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41c92a468310eb34628734deef9fc8b6_JaffaCakes118
Size
210KB
MD5
41c92a468310eb34628734deef9fc8b6
SHA1
0a565c500fb355cbcec74500400fa1e221e8ab10
SHA256
aabdaa1784c8768be911ce9268f5bb1c98f3fbebe5051a5bac95b5ce791b00a7
SHA512
00f36255b19109d74979c33072c09e226a604641f4309c4317588f811abe199935841a5d932660df9e3c7953ad0c3f3bc96beea5af331440e8c80cacbea1cfa1
SSDEEP
6144:LMorywf+/uCpKBPTEYVo/To6TC3m/8WFSQ86U:LIWCpsPTE24FTom/83bH
Checks for missing Authenticode signature.
resource |
---|
41c92a468310eb34628734deef9fc8b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Bull
Byron
H9922
Prep
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ