ServiceMain
ServicemixX
cervicemixX
svchostdkx
Behavioral task
behavioral1
Sample
8ac9662e3ef2ff75bbcdc9989834e961_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8ac9662e3ef2ff75bbcdc9989834e961_JaffaCakes118
Size
102KB
MD5
8ac9662e3ef2ff75bbcdc9989834e961
SHA1
1fc2a4d4d605ed675449d1eabbb3bc55b0a8b481
SHA256
ea610ee4877f05709219da3b5264540e7c40d46cbcb142fc6c5ae52a39c6ed22
SHA512
d253b6d5f2d76a17fbcb10c35d81a9947ae9d9729b0c08f690072c911366a171d00533a80865249693febbc8507c8bfa5f4c0dc71b2c5f72ff48cee35d8dde76
SSDEEP
3072:DyvcWBDs/1tp+6IPtWheqsxxQw3KUxT95hNJOk:+vckDsztkWgRmw3KUxx3NJF
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
8ac9662e3ef2ff75bbcdc9989834e961_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
ServicemixX
cervicemixX
svchostdkx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE