explorerxxx1
explorerxxx2
Behavioral task
behavioral1
Sample
86321e550bfdb55e6b1faea7511b283d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86321e550bfdb55e6b1faea7511b283d_JaffaCakes118
Size
72KB
MD5
86321e550bfdb55e6b1faea7511b283d
SHA1
24668d4f472f738e2f4f0d1996e453151d8e3555
SHA256
b1f451c93e13354012b1f21a983126b38266a6850b03e7da4f4bd2341624cdc4
SHA512
670d6733808aa56b7145e8bae8f459e1e9e12a8c1d6971089b817bbbc8fda0a06dce83573db603fb9d98dac02f0d796f26a0ba9a55df01459922231fef41e11a
SSDEEP
768:07iA/sMkWrTc5lp4rNpkcsI4FAbpChd1XLsaht:0GAAqc5lKkc14AQIaj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86321e550bfdb55e6b1faea7511b283d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
explorerxxx1
explorerxxx2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE