sityp
sitypnow
Behavioral task
behavioral1
Sample
73764598909a1a6165d17c7b02abdcf2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73764598909a1a6165d17c7b02abdcf2_JaffaCakes118
Size
124KB
MD5
73764598909a1a6165d17c7b02abdcf2
SHA1
5063a6d823ce5a11ba21454ac855d4e416fda71b
SHA256
b16ffa585480cba20fc150909d7dedda31faf3ee2961e16f1b17e756422a313f
SHA512
64172ad242649255e886aa7b82d4043c7c766cf733ee9c93d770d957f0f3abbb8f32d4af13fc38c685385c1f17471fee1b8dde0505728a79530aa4e25a37cc1f
SSDEEP
3072:zoz1RnWZmWTmuBMgMRVfHPsrgfzecglcChWtyly:2XtOB6fHeoglcChWg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73764598909a1a6165d17c7b02abdcf2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
sityp
sitypnow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ