KAV_Gout
SysDataBuffer
Behavioral task
behavioral1
Sample
6f957cfc00de0d61f5359ff1d03b1758_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6f957cfc00de0d61f5359ff1d03b1758_JaffaCakes118
Size
203KB
MD5
6f957cfc00de0d61f5359ff1d03b1758
SHA1
8286f6dfce0a3fa7a9a8b6a0affba23adda7e676
SHA256
1a9ca93b477615db1800afa29902582a17c68aa830f472524a72ba9ca382230f
SHA512
00ede53c2e17aebfa5d7485472cddd3afed236f175589b32a7bfb56bce390f0d32dd384d2e16847a474d56f8cfffbd06b05911bcbc0ffaed07af882dc71c4df3
SSDEEP
768:mbO/Dtcm2Mc+ByisNyvLILfcke+XmfxfmI2L:EcDtcEcOBayDMCdfA3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f957cfc00de0d61f5359ff1d03b1758_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KAV_Gout
SysDataBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE