CodeMain
CodeService
MainCode
MainService
ServiceCode
ServiceMain
rukou
Behavioral task
behavioral1
Sample
0df6e902c9c12125b00a64c589d9b3aa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0df6e902c9c12125b00a64c589d9b3aa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0df6e902c9c12125b00a64c589d9b3aa_JaffaCakes118
Size
20.2MB
MD5
0df6e902c9c12125b00a64c589d9b3aa
SHA1
63682e6a194f572baf1bdedbd2e9cfb863e0c642
SHA256
e2ec8d77852d33a3572891b99b962f84fedf27c59c1ab61fad7f35f575a94b95
SHA512
4ce35151690fbd776d7922d5754eb9bafd0b0eb9e7f836270b47e6b11117374509ab4f52fe0aa4aa4e62cec6cf9db1959089df27463503a9ab241581d01a1f37
SSDEEP
3072:cdhKnl9KuG4glzvdJOayGeJ7HlkJ+tum+/2/Y5:yhZuF8vrtUJ7HlkYLR/2
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
0df6e902c9c12125b00a64c589d9b3aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CodeMain
CodeService
MainCode
MainService
ServiceCode
ServiceMain
rukou
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ