gnsjxjks
uxrlmbhth
wenmljmqsrv
Behavioral task
behavioral1
Sample
6a4dbd3c7ef0ee374cc1a6ab06d66d2f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6a4dbd3c7ef0ee374cc1a6ab06d66d2f_JaffaCakes118
Size
643KB
MD5
6a4dbd3c7ef0ee374cc1a6ab06d66d2f
SHA1
929f57109a69cfdc9e061d09d8e3a2e39b8b63d8
SHA256
9589df03f7555cf58c84bb0c81aa90d5637be85890653dfdd5cd6ec398b41902
SHA512
52bdc04ae8c886e0e9de46ddbbb5d2eca8b6d9bfc8d8aa31379b1798d5be62c9223f76afa25a32b4f408e03301824a09e8583aa43872ac4487da258332fa9ff6
SSDEEP
6144:WrRYHYhdixhecoYIgKoRA4gV2CmW29U203xJRhZ90xP2FfQUtLs4eQloS:ETAEYIgKoeDuGHn0N6fFYbQloS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a4dbd3c7ef0ee374cc1a6ab06d66d2f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gnsjxjks
uxrlmbhth
wenmljmqsrv
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE