COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
1021e9f6802c33562890b43c65d37042_JaffaCakes118.dll
Resource
win7-20240708-en
Target
1021e9f6802c33562890b43c65d37042_JaffaCakes118
Size
173KB
MD5
1021e9f6802c33562890b43c65d37042
SHA1
0eee42fde554e842b255b19da0de078dac810b3d
SHA256
c96d49877a0674fa0a6a7078375a6df3415232a494dc3487b6322646b4535c09
SHA512
cf2b1387b2010c40f1b7920ab987085d6b5a008c33235e12058fd0ec24d83d0e6920f2690f91c5460e157c21c69db87f24b7ab6e34bc044daba168bb3874e10f
SSDEEP
1536:81Sixc0qpwBcXcdp/055VaC6IV/E01a4d+4YxuLdOWMuq/E01a4d+4YxuLdOWMuD:exc16D3aVaCLtkWF6tkWF6tkWF6tkWF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1021e9f6802c33562890b43c65d37042_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE