kh
pckduwrwyb
vyuxfjse
ycna
Behavioral task
behavioral1
Sample
8aeed090ece4778884c9c25e9268120a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8aeed090ece4778884c9c25e9268120a_JaffaCakes118
Size
654KB
MD5
8aeed090ece4778884c9c25e9268120a
SHA1
9b34d11575ca8146b02ae5e499f8ea9c7da5e1c5
SHA256
a1ca81c5ffe20e7a6e5b9b7aad1513f10343805e08b3ff38fd3ebadb75d00f2e
SHA512
e9f6eab4dbc9b6eaf303d307e47f24ab3981a6f90dfaf21647608643adb63ec2561769adfb295b0600a7d5893e2c754988a72f7c737a50460cd4f323964648a5
SSDEEP
6144:+NZOTCewth4M/xAvYh6+R/uiAepPfMNyZf51rhMb4pEEZZVG20YcDoS:+n2OxAv+QiAeVUNA5TMUpHrG2OoS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8aeed090ece4778884c9c25e9268120a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
kh
pckduwrwyb
vyuxfjse
ycna
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE