gnsjxjks
uxrlmbhth
wenmljmqsrv
Behavioral task
behavioral1
Sample
dd269e8bc5d750f9496d16ab65f9c145_JaffaCakes118.dll
Resource
win7-20240704-en
Target
dd269e8bc5d750f9496d16ab65f9c145_JaffaCakes118
Size
643KB
MD5
dd269e8bc5d750f9496d16ab65f9c145
SHA1
ca9523424417fadae7a26400743c5f7dbcebaa5b
SHA256
98a1f93b831419a7e35b4f97d045f79a234e0fe6f9b0cb057814f88d54dd6085
SHA512
c43361c77981726033b568accb29d3b1debe2298c87a896e7e1bd31f13106d644c45ecd8b3091cfa097e671e93636ed73e7ea07faa4f8127733c358bef2d6365
SSDEEP
6144:WrRYHYhdixhecoYIgKoRA4gV2CmW29U203xJRhZ90xP2FfQUtLs4eQloS:ETAEYIgKoeDuGHn0N6fFYbQloS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dd269e8bc5d750f9496d16ab65f9c145_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gnsjxjks
uxrlmbhth
wenmljmqsrv
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE