mymain
nomain
Behavioral task
behavioral1
Sample
aef13737c7a791dd1264bc1d9a755c57_JaffaCakes118.dll
Resource
win7-20240705-en
Target
aef13737c7a791dd1264bc1d9a755c57_JaffaCakes118
Size
30KB
MD5
aef13737c7a791dd1264bc1d9a755c57
SHA1
4c130dda698181f60ea3bd868e0784d409a46fc3
SHA256
4835004a61e43483d1da581bc55946d5620ae8b00602098c708cd3242be137a0
SHA512
9b37ee06ce7e29bdb492fee8178228e9ecf99c8cfc943b87abdbbf5c5a475cabff84e0ffb5735f241a779cfeba5685783de4771cde493a1ff05cc53995c707fe
SSDEEP
768:D7Kbafjo2EskwUtZa+uCOoghIvdVvJ4WbMWaSmQCxZekyUxEBctEA:D7UyjoJtkT5ozvJLbMaRCxMxdA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aef13737c7a791dd1264bc1d9a755c57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
mymain
nomain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE