Huaiiiis
Jiujitsu
Behavioral task
behavioral1
Sample
f991f54078e2c54ea49146af808389cf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
f991f54078e2c54ea49146af808389cf_JaffaCakes118
Size
869KB
MD5
f991f54078e2c54ea49146af808389cf
SHA1
3f62ff3b23d881ea289504f368f37d38ee99fab7
SHA256
4d2a43ef340e6dd0fce433cff6c8a9a3bed27c5ac1bb0f62abcb5cd7dfaccfdf
SHA512
d34f1649e638c02073d04bf2d422ea946ba2c36cba25102149c4d892f72f17f5c3a70a4d3599def03476b4c503886e66e59338dd1903d191650ea86b02d5b961
SSDEEP
24576:USt61bf9YWcZR992Rg9SuXd4iGLlwzE+pS:t8hdcZV8+Sw4iMwzE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f991f54078e2c54ea49146af808389cf_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Huaiiiis
Jiujitsu
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE