ServiceMain
anhuibengBB
lmmz
Behavioral task
behavioral1
Sample
ab53d0000da85d944b1a262b0cf299b3_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ab53d0000da85d944b1a262b0cf299b3_JaffaCakes118
Size
98KB
MD5
ab53d0000da85d944b1a262b0cf299b3
SHA1
372da5290bc8eef541559354ea1ee3f9e5ed425a
SHA256
4841a15c41c99375c15720d390433bb32eb548f42cc6ab1989e3dfa1224c28e9
SHA512
a0dcf6d1a53a15728836adac303d602e44b4cb559622a7f5e96374250c88179ede57a04d7785591d810410bd73dc0a983d3f4f7d638289044dfb37cb294c793f
SSDEEP
1536:XzzxmTwqh0WDRi5bPYyWWZRa6uuqcedJf/EaLr6a//rBO:XzzxLqh+lPURuqJdJ/Eaf6a//rBO
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
ab53d0000da85d944b1a262b0cf299b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
anhuibengBB
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ