ctxnh
fxuvdtqwup
gjmmaihrn
Behavioral task
behavioral1
Sample
89d5076d5bfd144033d0ce6f86390c01_JaffaCakes118.dll
Resource
win7-20240704-en
Target
89d5076d5bfd144033d0ce6f86390c01_JaffaCakes118
Size
653KB
MD5
89d5076d5bfd144033d0ce6f86390c01
SHA1
b7b9967779c9b1cc395def51c5c83226c4d1e028
SHA256
6e3b18f018bb63ec6b0f3da837bdbf3771582d28712d36cd4c8a9d8091dc706e
SHA512
6c0a93f3a9741b666af99c1bcaff2b897b69a952c41e3a4a09dd06176878108389abb16ff1e9f7de54c00e48215b001d1d2556f79378a107ce0d762327d6ea39
SSDEEP
6144:Kj8vDsuisfBqScqZcpgjmH+gGfRsTFFo2pkbqtk2Kn0JrZt9PvN8oS:KYIulf4kcp6cDGfRIFbkydrZDmoS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89d5076d5bfd144033d0ce6f86390c01_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ctxnh
fxuvdtqwup
gjmmaihrn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE