anhuibengbu
ServiceMain
lmmz
Behavioral task
behavioral1
Sample
bb7cfdb1dd1b87d4715d4df54fe43573_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bb7cfdb1dd1b87d4715d4df54fe43573_JaffaCakes118
Size
98KB
MD5
bb7cfdb1dd1b87d4715d4df54fe43573
SHA1
9271838ed46bda80ddc068e1e4b685e003bdbe15
SHA256
755f6979a4056fad9d51d00a700341ec52cd7b51dd2f70c92fca95e3d7a01024
SHA512
6adcc8427e7a6990eecce2acc0bbf3eb6a5aeb6514c415d317b206953c43b2c30acb1ff85f8ea79a18396960bab24150ba76192a7054c09e6ba2f2b068ae0b1a
SSDEEP
1536:3TgxmTwqh0WDRi5bmY+aFZR2juuqcexbf/naDI6a//dBh:3TgxLqh+lmzyuqJxr/nas6a//dBh
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
bb7cfdb1dd1b87d4715d4df54fe43573_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
anhuibengbu
ServiceMain
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ