EnvoIFO
EnvoMSO
Behavioral task
behavioral1
Sample
8a1ccdb5dcf1fb6ffe35606718846520_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8a1ccdb5dcf1fb6ffe35606718846520_JaffaCakes118
Size
978KB
MD5
8a1ccdb5dcf1fb6ffe35606718846520
SHA1
0539b5ccf05e80c50285dde0ae6666045995bdde
SHA256
754188e2ec88eff6c58d1b46052ae9449b8b8b0ea86da03c8faea1f634ded5ac
SHA512
0440ff0f4726e45fd6cae818d2922f0c45a515f069077902f1290e5d2056b2c9a01bd7bc7208cd61df31e6cf2baae83fe84d3155d2819f80f60e7e4854df42b9
SSDEEP
24576:d5BjQFSKdqnZQEEOp1lhNkMweTb1L6dp:SdbMw0bd63
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
8a1ccdb5dcf1fb6ffe35606718846520_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnvoIFO
EnvoMSO
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE