kh
pckduwrwyb
vyuxfjse
ycna
Behavioral task
behavioral1
Sample
b8100986d8075661faca5bce004de48a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8100986d8075661faca5bce004de48a_JaffaCakes118
Size
645KB
MD5
b8100986d8075661faca5bce004de48a
SHA1
3136bf3dd44512f12dda7a571e4450726321a3c4
SHA256
8740a8381f57a64e98631de1100a6ae39a2861f7c0d97477630ab158c470c6d4
SHA512
f5f2092d3225f3abc5495285ad7d36309d21d48e33a5f5adb30533be322239229df58cb67dd2c65c0cee7818210c4664e702785635cefb112b3123add2820511
SSDEEP
6144:3XvrJWmA4ekniPq6bI7R88MlUqiHADD3K8ytTFXMj+nmCk6PeoS:HvEcekiC6PAHErjyBZdnmnDoS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8100986d8075661faca5bce004de48a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
kh
pckduwrwyb
vyuxfjse
ycna
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE