CFYuMi
CFYuMijkw
CFYuMizjk
RunDllHostsallBpod
RunDllHostsallBpodd
RunDllHostsallBpoo
RunDllHostsallBpot
Behavioral task
behavioral1
Sample
96c0779d8e3e5ca4da6e347761259346_JaffaCakes118.dll
Resource
win7-20240708-en
Target
96c0779d8e3e5ca4da6e347761259346_JaffaCakes118
Size
934KB
MD5
96c0779d8e3e5ca4da6e347761259346
SHA1
c3c83082cc22719d0e7f955ac643bef0283bf440
SHA256
d4e42bc41d8ee3dd2753fd4ee91e5e7486afa36b2d8045f6f55a83d4f50ea2c4
SHA512
b2f204bfd5482fae22d52eb3bdd0d3587298f849a3c577e82c499117d86d70e0868f4cd41e0896eb83df9e61c5ced461d0afc4c6e3c40e32e5049f918e6a2355
SSDEEP
12288:9dYxYIEB0V5xfTew5AI1pse7MzgUFdovQng2:9CxYHE5tTf5AI/a0Qnb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96c0779d8e3e5ca4da6e347761259346_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CFYuMi
CFYuMijkw
CFYuMizjk
RunDllHostsallBpod
RunDllHostsallBpodd
RunDllHostsallBpoo
RunDllHostsallBpot
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE