all
allert
load
windows
Behavioral task
behavioral1
Sample
be6f5981f8de3fdc8f2fb350ea3c207f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be6f5981f8de3fdc8f2fb350ea3c207f_JaffaCakes118
Size
33KB
MD5
be6f5981f8de3fdc8f2fb350ea3c207f
SHA1
db3301364e1be089d8e69dc9d61ded149999d695
SHA256
96bdf40402ce3ea4e291fcf214341f47c47a389f77e88da20ad2e50b97f4356f
SHA512
1373e083e3cd0a3f236e3dc37cc13dd01232809ebaed8e0efe3c5d76a4daf9efe851b49a38e13ee3628d0fbe2b32844a160af9ae8f14fa81d6321127b271d995
SSDEEP
384:NVLzL1skD+M7iP5xzYtrnggCQlerZf5Qt73lrqbbn+ujzlVm:NVpjalXzYtLlledf5qVmX+EV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be6f5981f8de3fdc8f2fb350ea3c207f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
all
allert
load
windows
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE