InitCtl
InitCtl2
Behavioral task
behavioral1
Sample
1779f9aa5a7d3d9b3c79ac7c098e78aa_JaffaCakes118.dll
Resource
win7-20240903-en
Target
1779f9aa5a7d3d9b3c79ac7c098e78aa_JaffaCakes118
Size
236KB
MD5
1779f9aa5a7d3d9b3c79ac7c098e78aa
SHA1
970d21490e0ac22eaca9264c648940a0a437fd16
SHA256
cb3f71a1ed687fe34c51b369d7eeb0312b83d7f913bf09f1fae78928690a70b1
SHA512
03131ca39a54ed2eedb45fda02a30f459bed3d9fa2f117c280948ac907517208ba4c412eaca45b26d5241f8e69f9a0ac41fa4cbaabddc6c488471111041c35a7
SSDEEP
6144:TUCCmE/E6vepCrKrE7DlrAEtpMS6cOQ68QVC1+:TIpDqCr77RcEtpMS6NQ61
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1779f9aa5a7d3d9b3c79ac7c098e78aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitCtl
InitCtl2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE