ServiceMain
SinoVip
XinJiang75
Behavioral task
behavioral1
Sample
c17c903e6b4b333bbb642471466b43b0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c17c903e6b4b333bbb642471466b43b0_JaffaCakes118
Size
95KB
MD5
c17c903e6b4b333bbb642471466b43b0
SHA1
c8f3cb198d2a926ab72f0344e6ba50bc8af94392
SHA256
7e0298c7ae6bd9368336a5416e3330628a0793d2596de0f946f744791c1058c0
SHA512
0204430bbb6e7df239dfeca925b87980a6d051b58849d7553250307371b7316becb7d03e34cddbec35a33a266a5bb87cfaf641f4fb343b104fee8f8b650fe788
SSDEEP
1536:Is/wPh5Qqo0rsBZbTkBQf1UmVQeZacB2Rfn2E9cEZTw+mzY5OBO:Is/wp+H0A/3kBQV/Zae2Bn2E/Tw+mWOU
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
c17c903e6b4b333bbb642471466b43b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
SinoVip
XinJiang75
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ