??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
2f42c6892917aeb9f478578b099bea6d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2f42c6892917aeb9f478578b099bea6d_JaffaCakes118
Size
584KB
MD5
2f42c6892917aeb9f478578b099bea6d
SHA1
957a5976a0a20929c7d8efc1cd283fa7fba062a4
SHA256
dd0443a0bc58222a8e2f14b81f57cc2a364bc7b6ec3df1056e8c302c91bf7330
SHA512
481e863ce3c55c92ecbd3983ec1106c86b8a9768acc7d9fad2fe28a2dd48cc7de80e486c3524ae81cfead032529bca11bce350e6a091f2280818b5dab9e683ac
SSDEEP
12288:bU2HY5tMn1xSEAktcfWJs7WAh9Ixrr5Ynnt:Q27n1xsktcOYWMAmnt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f42c6892917aeb9f478578b099bea6d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE