Update
install
reserve_init
Behavioral task
behavioral1
Sample
6ff313db67308c1d555d4e28dacaebfe_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ff313db67308c1d555d4e28dacaebfe_JaffaCakes118
Size
56KB
MD5
6ff313db67308c1d555d4e28dacaebfe
SHA1
cf2f8892b60b6b34f650877ca7bec23aed34166c
SHA256
46ad537e2db5fcfc97d5eb318ab8147c6c9fa2cea5ea4163d53b374474be8be3
SHA512
3af34131bd137a0ef1e716ed2253608a1481a5b2a692be91940e8f4104e35c78163c72c4c570370b9372e710672538a25b5a6c93bcf648850ec7a319bfbdac8b
SSDEEP
768:QyYv4h+aQyDlVonk1xlfwv31hbemfQ7DmSzrClkCi52:Qyk2Wyronk17qFduWSikC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ff313db67308c1d555d4e28dacaebfe_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Update
install
reserve_init
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE