ServiceMain
aaaaaaaaaaaa
bbbbbbbbbbbb
cccccccccccc
zzzzzzzzzzzzz
Behavioral task
behavioral1
Sample
05144502e2f1cce69c6391a3dd5e7cbf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
05144502e2f1cce69c6391a3dd5e7cbf_JaffaCakes118
Size
106KB
MD5
05144502e2f1cce69c6391a3dd5e7cbf
SHA1
6e515abf0b3b46c3f9bdb2be86ecdae8bd12f53a
SHA256
244b21695b80bf8081ce1b28222aae5c9485df76114f2cafc9ecdbe2d1470c4a
SHA512
1e212db12d7e8fb40078656584eae23be1883fbef441e58204c8bf6a00c7fa2e8dc22d526580d9ad4a95a248073d08ce9834bbc6c9c3346cec621cf474cb4973
SSDEEP
3072:Z9TubYGHqdeNJ/gy2x/nN82CCUJvXHCcgq6:7TubZHq4nexN/8JvSH
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
05144502e2f1cce69c6391a3dd5e7cbf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
aaaaaaaaaaaa
bbbbbbbbbbbb
cccccccccccc
zzzzzzzzzzzzz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ