CCenter
Rool
ServiceMain
whm
Behavioral task
behavioral1
Sample
87f55466608a523e47a665e51d28f4fc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
87f55466608a523e47a665e51d28f4fc_JaffaCakes118
Size
81KB
MD5
87f55466608a523e47a665e51d28f4fc
SHA1
ad769f128232ab51e5106b5904370d6e833837e4
SHA256
0a6c439844a13f5750bfaabc446943349bae2d7b126c64e80d7fff185233b90b
SHA512
043268dda02c2cf21c29407a52f004e42c4059c7f5ce0d34bb47dd2d252d873889d74715e2f364b9faf89cf907429b79d9ad38198eb5b77951b356697552e63b
SSDEEP
1536:MVsm6EkMxnEX+TYD4/Ncq0cRIVf368I1UTYwc:MVsm6Ek6U+TYEWq0KIN368zYwc
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
87f55466608a523e47a665e51d28f4fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CCenter
Rool
ServiceMain
whm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ