BossMoneyGod
RisingShiSB
ServiceMain
Behavioral task
behavioral1
Sample
df937d790aa93cb1d1ee27f2c56e9ccd_JaffaCakes118.dll
Resource
win7-20240729-en
Target
df937d790aa93cb1d1ee27f2c56e9ccd_JaffaCakes118
Size
94KB
MD5
df937d790aa93cb1d1ee27f2c56e9ccd
SHA1
712be4377e0d9078decc41a6d21855e612382a7c
SHA256
3b453fc01b93c8b389235f38e7f27819a4b820ae509b34d04a6eccbc21768c4e
SHA512
c9ea8270ff1b9c301f6e1b063977d19244897f6f19afaa5a39859cc1c4656d609756f6e8a49130068a84735b566923258920c5165596ba5735f183ae48bcc2fa
SSDEEP
1536:8sJgbZWar0sghjjoVY4eqNzmbc3xCfa9wuCeqHHp2RJX:8sJgbZT0sgmVYP4mbMxUa9wTHHp2RJX
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
df937d790aa93cb1d1ee27f2c56e9ccd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BossMoneyGod
RisingShiSB
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ