ServiceMain
YinXiangTEST
better
good
Behavioral task
behavioral1
Sample
94c1fd8b7ebe6350947be7dd79b42e22_JaffaCakes118.dll
Resource
win7-20240708-en
Target
94c1fd8b7ebe6350947be7dd79b42e22_JaffaCakes118
Size
99KB
MD5
94c1fd8b7ebe6350947be7dd79b42e22
SHA1
8c55bc7467882f0894aedc2007972dd4bacc0db4
SHA256
5a1bd8b05e622de5a71566f39946d1cbb8f2c486d0ef795fc9c3b2905152acb2
SHA512
23d695546fa6195ace73a574c8a9ff261bdcd66a0abcb68a7ecd664712ab22642b1cd683a2e5085a820c3e3482f151b74d86f6445d454e9b2fd6558a6ba9c5bf
SSDEEP
1536:58IZf13ODfzWzK7etUF338pyDuah448Hcrx9fadQ+joyTw+6V:58IZf1uWWwUFnOyhB8HIxladQcTw+6V
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
94c1fd8b7ebe6350947be7dd79b42e22_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
YinXiangTEST
better
good
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ