calloc
JustforFun2
ServiceMain
Behavioral task
behavioral1
Sample
4adcb51cc74ce97a086fe1f867cfd9a8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
4adcb51cc74ce97a086fe1f867cfd9a8_JaffaCakes118
Size
60KB
MD5
4adcb51cc74ce97a086fe1f867cfd9a8
SHA1
2a994c5726484afc2f003b801812c7c2d6a088b6
SHA256
9bab4b74ffbb7698aa35f407683e02d7271c4b75143b4093cbd91864ea5929e4
SHA512
dbbf81acf44a4b8c62eeabd0c0befbe0fe3bd0f77d7791da91dea238fbbfda6b2f3319b9a1f78798a120132d3a918b92ad1f14cd93bdbec28c48e0db5d0d9d21
SSDEEP
1536:3V8Pu+9ktr5UiLh64sxcuMBfcmyfXkYPVVF7:3V8PLatRAvxdMxcmycYPVVF7
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
4adcb51cc74ce97a086fe1f867cfd9a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
calloc
JustforFun2
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ