RE
K}jnq{}Uyqv
TE
Behavioral task
behavioral1
Sample
JaffaCakes118_4adbed7e3166e09baf144e730a42518d.dll
Resource
win7-20240903-en
Target
JaffaCakes118_4adbed7e3166e09baf144e730a42518d
Size
95KB
MD5
4adbed7e3166e09baf144e730a42518d
SHA1
e0464635e137834fcbb808647c77e9c66c3143cb
SHA256
586d901a8277295287d051536f69d5b47dc824ebed81e0792435da46d321ef47
SHA512
8c8626dec8b85422338ea59958ec2cddf2d0d8bf2befa28475971a14fd617fbb59846194bdf8b26fbc295dadd43d50bdc4ee1394ea02234d7a6ced91f2163197
SSDEEP
1536:BTUx5F/iDD0kWoExu5YfIQV1fw1zcuB+faRQDInZGwZK5pI:Wx5F/EWw+fDA1z9B4aRQUGwZKLI
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_4adbed7e3166e09baf144e730a42518d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RE
K}jnq{}Uyqv
TE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ