Outt
Sett
Behavioral task
behavioral1
Sample
48c8bdbe20ef4d946dd881c9eb8caf55_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48c8bdbe20ef4d946dd881c9eb8caf55_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48c8bdbe20ef4d946dd881c9eb8caf55_JaffaCakes118
Size
137KB
MD5
48c8bdbe20ef4d946dd881c9eb8caf55
SHA1
44317fef6be7390f710918e4a8990db9962d25d6
SHA256
ed6c64cf5aef6c87d825ef847e95142298605a21e3d92a0f00115e4419612abf
SHA512
2f6937365bb9503a3b3c5ca8f520811aed250994cc1165bf129d04e2d1ef1be8c5f490c4439aeb54e1a78f77983d83e049133f5617eb8abbab27cfb4274e8aed
SSDEEP
1536:gYvRN3uV/DD8eEznhBbgA6U616tNue+6vK2huO77HFqxGLUH5GYa13DGwpxemmu1:DvvKIXjhA1YX+6dfFLUH5haxLemj1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
48c8bdbe20ef4d946dd881c9eb8caf55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE