ISPI
UISPI
WSPStartup
Behavioral task
behavioral1
Sample
f62350e0cea15f618cd73b94122de2da_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f62350e0cea15f618cd73b94122de2da_JaffaCakes118
Size
154KB
MD5
f62350e0cea15f618cd73b94122de2da
SHA1
b308a28e806e88de6700b9bf5a76f57743cfbd67
SHA256
a5451dbdfcb4aae776b439eead65ecfaa9d8169b8b30d39772dec9a475ea3a12
SHA512
ee931080dc7db232dbe61e69e77c3d39e13b667ae38f7b4c5ccc464b315494265cbbc8c20db38bd96d7cc70789ba210e951ca260ff59f56c5eb067f44344339e
SSDEEP
3072:YdgM9yz9Eq7YkeOMC3bGvKolQae/cOrlBfjjZDH44:YClz9b7lePCLGvKolKjBt1f
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f62350e0cea15f618cd73b94122de2da_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ISPI
UISPI
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE