JLYA
NCCJJ
Rool
ServiceMain
Behavioral task
behavioral1
Sample
cfa6bd3f7aa07939c3f8a5054caaa0be_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cfa6bd3f7aa07939c3f8a5054caaa0be_JaffaCakes118
Size
96KB
MD5
cfa6bd3f7aa07939c3f8a5054caaa0be
SHA1
717a64c698d2f3378edd67dc6f6f4496887e1f34
SHA256
f11fb06b7537a92e23351d2c16f60e8fbc97f83f8c63a38e0cfe3249820fa1fb
SHA512
c99891bf08b7780e7520ed8cd22bc83056d1051eb329a79d0f1139ac2304db560d783d92943ba1d07123afd93fefc781563d1d09a2a288208f90f019c0b06ee0
SSDEEP
1536:5rXLirwBxHCsiKrypOSukn2QPcq5DfvoAWz1YTwqRF9qGB:5rXLE+nioyZIQPB5jvoAa1YTwqRFwGB
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
cfa6bd3f7aa07939c3f8a5054caaa0be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JLYA
NCCJJ
Rool
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ