??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
e117e0df718af0b8ed033b3c0b9b6910_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e117e0df718af0b8ed033b3c0b9b6910_JaffaCakes118
Size
723KB
MD5
e117e0df718af0b8ed033b3c0b9b6910
SHA1
05638337cc9b4f253f3f1bf87ad2ec041ac18767
SHA256
e6d63883309816a5cb94333fd636301c29079bd071d958b0943bb663b30ef7b7
SHA512
0ce033fdd6795fc66fa0be6246221a34da8387af47ed6c9e42275016bcce15cd0fdcaeea143fe4aaa2a63688f24778080da3356b32d2f14d04a1fac64586999a
SSDEEP
12288:6OBsPIXb44SC2IQBC+chhAMWrP37nxliisZ95M6mlFW0HLjC:1Gh6QBC+GhJaTMz5GP7HLjC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e117e0df718af0b8ed033b3c0b9b6910_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE