fork
forkonce
Behavioral task
behavioral1
Sample
b213263751e7deef65913382b19396c6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b213263751e7deef65913382b19396c6_JaffaCakes118
Size
123KB
MD5
b213263751e7deef65913382b19396c6
SHA1
1b87075f67b3560c713b84cbaa2b69078e9849e5
SHA256
c04689aed6849ee1392204674d29103dd67d1d2aab25a04dd639ea6b0f1660ab
SHA512
ebe2c112d2b675bc7056ca85f9e4f9d5986c1433eb0d28873ac0a10df3598f9ca99e5501761f689ad4752edadac586ad28bb18cdb3139cfc2a6fe08b04a456fa
SSDEEP
3072:enb6GaQUJ+/W6Vp7spDXsYqFtCLBnpa0Pht52j:6b6GaZQ/XVpMDuFKpaAhtIj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b213263751e7deef65913382b19396c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fork
forkonce
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ