cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
Behavioral task
behavioral1
Sample
415da59932458b1cd8b05dff5ec3023c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
415da59932458b1cd8b05dff5ec3023c_JaffaCakes118
Size
646KB
MD5
415da59932458b1cd8b05dff5ec3023c
SHA1
95efbefe401f7da1fd2b13373e50583e37f72d38
SHA256
2c8339c9a1c3171ea03b2112abc077e3ccd2f07635b603bcca8c497e13fb1869
SHA512
afbd7ce27037bfbea3633af61e065f6019b60b105d23829edc7ace81db7f1dd9f4a1abb77029a3ae7beaea753750632f2bb3f67d942f062e8b77587d38febe3d
SSDEEP
6144:ozfOrI8+ujUpcQk70zFfkdSxHaPVWvVmdcW4+/axvwpCz941FyQeYu6oSl:oZ8+C2tfkd8HEkvs49+pKyI+oSl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
415da59932458b1cd8b05dff5ec3023c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE