JLYA
NCCJJ
Rool
ServiceMain
Behavioral task
behavioral1
Sample
JaffaCakes118_436632cfed769706c90062b2e3e30d19.dll
Resource
win7-20240903-en
Target
JaffaCakes118_436632cfed769706c90062b2e3e30d19
Size
96KB
MD5
436632cfed769706c90062b2e3e30d19
SHA1
cb054fe4680c3052033eeeba8b3af1004f6c6da5
SHA256
79a704117d370732ee097e919fb1c461078fe1338f83a61ce4560318ed6a56ec
SHA512
594288a1aa3d7604a2113abc2268c2dc4bfb1b7748b451837caeb9ae8131b433122a2c94932a75224a92ab6f1bd5ae537d8843f9e6855a4ab194cb6be647c67f
SSDEEP
1536:NCr3Wn07yBFyRCDsiibCaerVMkDFjUWcy5wfvoAvwhFTTwqrit:4r3MScF2ikCJvUWx5KvoAIh5Twqrit
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_436632cfed769706c90062b2e3e30d19 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JLYA
NCCJJ
Rool
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ