fwor
nieb
Behavioral task
behavioral1
Sample
f513678cffab7662c7305857c0a344a7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f513678cffab7662c7305857c0a344a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f513678cffab7662c7305857c0a344a7_JaffaCakes118
Size
656KB
MD5
f513678cffab7662c7305857c0a344a7
SHA1
62fe8a7607c7b04a7c2c69471811823fedb4f98d
SHA256
20152459d3ad001cabd571a3a3747d62514f92abf7fc63aa73c83472d8a0b35e
SHA512
508c88d7304c0ad01e595e32ce0c9a8e007e72851901dbe3486713afa65ff4e6d217ff1971a92fba4e0406652980423e73e5fea02341d2bcc6ab96c19b99d4c2
SSDEEP
6144:MQUbHuUUMOE1Dm3rrQTBNN9xbDonnHj5WyyMuoS:vUjuUUwS3QTfN99MnDiMuoS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f513678cffab7662c7305857c0a344a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE