Outt
Sett
Behavioral task
behavioral1
Sample
159b7646dcd05bbdc19f1d74a0a6324e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
159b7646dcd05bbdc19f1d74a0a6324e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
159b7646dcd05bbdc19f1d74a0a6324e_JaffaCakes118
Size
115KB
MD5
159b7646dcd05bbdc19f1d74a0a6324e
SHA1
288dd3f223540f0c514d43102e8ede88ea20e00b
SHA256
b25395db00c227cfd8a73bcfea30a21e9bc1654288eec2c712bb155a56b805af
SHA512
2b20c7e596c63024aefe7fed214fba76a5e9152b3b72c64df061f3741aa4676683554e18c3ae56f6e790403178ae2558af342203a5cf8644ac256162a3c3cd53
SSDEEP
1536:gYvRN3uV/DD8eEznhBbgA6U616t0tCkx5RcPsatYkZu6D8kl:DvvKIXjhA1Y09DluFF8kl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
159b7646dcd05bbdc19f1d74a0a6324e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE