ServiceMain
anhuibengBB
lmmz
Behavioral task
behavioral1
Sample
041b58c3db13392e3d0b929fb0de9c33_JaffaCakes118.dll
Resource
win7-20240903-en
Target
041b58c3db13392e3d0b929fb0de9c33_JaffaCakes118
Size
98KB
MD5
041b58c3db13392e3d0b929fb0de9c33
SHA1
1ac47f1997718276967e3780dbace98153df0315
SHA256
1359a8549dc71629df770cfc6a1d832990bbb615336002e57cc7d2e995c76688
SHA512
7f6b031e381cba2258d2bfc3d8bd2087a0b4a3bfc6086a3ee76accd759706ad09911a5b5cf85b0548a4f31168bea3fc13a5f0064cda2ab20a4216830a8ad2ebc
SSDEEP
1536:3TzxmTwqh0WDRi5bPYyWWZaQ6wouqcedBf/EaMz6a//0Bj:3TzxLqh+lPDfouqJdx/EaW6a//0Bj
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
041b58c3db13392e3d0b929fb0de9c33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
anhuibengBB
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ