Rool
ServiceMain
whm
Behavioral task
behavioral1
Sample
a4da2f973c7b89dbd30657a034b2ca44_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a4da2f973c7b89dbd30657a034b2ca44_JaffaCakes118
Size
54KB
MD5
a4da2f973c7b89dbd30657a034b2ca44
SHA1
1093e65878c4c270e078b1c30e1c488d86c3d8dd
SHA256
2c13b78199f4f3aee700c87521faf4436437b05b29f9eaa41602ffe8733287ed
SHA512
3a4dbd2e9338aac424c409640eed79a9be378ac13e0eeac68382eb59ed197a5b8cf893b7104a2c46888d6adf60612ff70a045952bc90673cde47ff3e935a8a5e
SSDEEP
1536:uqDKxo46kCEC9DO7y15iDpqpUoCm96obx3FafO/KhOZKFe:GhCEAHozoRpXwg8Fe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a4da2f973c7b89dbd30657a034b2ca44_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
Rool
ServiceMain
whm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE