fork
forkonce
Behavioral task
behavioral1
Sample
d216d79c9448dd90013419d99e880f7f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d216d79c9448dd90013419d99e880f7f_JaffaCakes118
Size
123KB
MD5
d216d79c9448dd90013419d99e880f7f
SHA1
679e51327846b9f8eb7d185ea1b9bf8ce1db1a9a
SHA256
30cf6db99f93741d0eca0378310accbd570230f1ca1966febff0cd44972047d5
SHA512
0b77ab17868a151a19fe1f087b5bc078ba77b0ad69cf9c6cd99eb988bb1d4ae62fe8c131a766ae1b444b7bd2f415fc737989f3dbc3eec4ecbffa689577aa9a42
SSDEEP
1536:NNhlfYu8jU7izQhQBePMD/dTZ75EKDGU3+nPOT0frKimNCkM7uFY6F+MTm+y/Kn/:jnfz8jAQB5HVNh+mQf+iV3uFYMTZyY/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d216d79c9448dd90013419d99e880f7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fork
forkonce
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ