qlnbxzvuzql
wo
Behavioral task
behavioral1
Sample
da55d0629801e365d5b00d768aa2288a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da55d0629801e365d5b00d768aa2288a_JaffaCakes118
Size
248KB
MD5
da55d0629801e365d5b00d768aa2288a
SHA1
3b9805eda86b1652ef36d5819078e8e4b28d5e6d
SHA256
67baa37bcec6beecd620da8d62f5b7ec92d0cb7c936bdd88ca31d495e8be28d8
SHA512
2a5e0da02633f06a4a3dc6693ef5d6a08a3596bbcaedd438bf03dab089376360312bf7c2555b0f080c0e3179640a648ab7d17b36ede31cfbe9bd94cb1357af07
SSDEEP
3072:oegYhsE7B/8S1wYPSt88pOjTqNy4OCxUzkIrXojXmlFMxDwcoMouteX:oegY8c8paqAFzdrkXmlCDwBMoSk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da55d0629801e365d5b00d768aa2288a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
qlnbxzvuzql
wo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE