all
allert
load
windows
Behavioral task
behavioral1
Sample
a8d4a831dd100a28c818670ab3c3ca6c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8d4a831dd100a28c818670ab3c3ca6c_JaffaCakes118
Size
33KB
MD5
a8d4a831dd100a28c818670ab3c3ca6c
SHA1
b0b95704aacdb30793d4dcc873a91fb242ded55a
SHA256
69c12ea50fe3ca8fd862d57ed69e555334961fd5f736e05a32d267c03202a356
SHA512
efbb8263387b259befbcc6c41661a1f88dbef17dce32fb80375854a41887f368e909ffde91891623d589b4b388fd6aab8e4cb366a44063bc8ee26984e23da0d6
SSDEEP
384:oBLeXGGP+M7iP5xzZDn5mlR+Njtlrqbbn+ujzlVI:oB6GtlXzZD58qTmX+EV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8d4a831dd100a28c818670ab3c3ca6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
all
allert
load
windows
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE