a
b
Behavioral task
behavioral1
Sample
8c16ec8d4d00761bbe151c004aae4d8a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8c16ec8d4d00761bbe151c004aae4d8a_JaffaCakes118
Size
78KB
MD5
8c16ec8d4d00761bbe151c004aae4d8a
SHA1
edade4ae5adcbc80c85b1a409b0481d632a94c51
SHA256
9c106e13d1a6c60388896f36fad8e343450a8eea99d1a1c40b1f7629de021291
SHA512
ca31315e39d7fd737f96b97096f353d2b87091eaf1e9e26373d71d87c74049c0548c66543abfb2f2e8307a6d6f6291e995ecc9a540f3d314ae9a83026358d848
SSDEEP
1536:4/QSP2cZaGOYlAo2YNEc2fBepgb73EBiRlpFrjeUev+o5:4vOcZabbrYoBepgvpFrjzeWy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c16ec8d4d00761bbe151c004aae4d8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
a
b
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ