fork
forkonce
Behavioral task
behavioral1
Sample
785db23a5b840e37cc307ae1f8af2a11_JaffaCakes118.dll
Resource
win7-20240705-en
Target
785db23a5b840e37cc307ae1f8af2a11_JaffaCakes118
Size
123KB
MD5
785db23a5b840e37cc307ae1f8af2a11
SHA1
c66604f8bf173de90d8e862225761f76c215af3c
SHA256
14ac1090481a222113648b59652bb03bb3b088225ff3f323a8c66e90fcc06d32
SHA512
69340729fdfb890ae2d622388619eed9f453c2fc6a05eb769e5e6c22f7b7d9614f59eca6448ddb822a0f2097bc1949d52ab43277ea4d94ced8f24fb391f3768c
SSDEEP
3072:8aQFfJ2i8DyaWYgC4Bnf2JR62YR9shMz3hv+gB6EgygU:GEikW5C4BfYRG9NLh2UNgygU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
785db23a5b840e37cc307ae1f8af2a11_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fork
forkonce
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ