Outt
Sett
Behavioral task
behavioral1
Sample
bfd4395924ef93d43b654d359ce67cb5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bfd4395924ef93d43b654d359ce67cb5_JaffaCakes118
Size
111KB
MD5
bfd4395924ef93d43b654d359ce67cb5
SHA1
fb5cea9c8d560301f772672ff83169cf46420270
SHA256
dbd90061b77f16d48153895ec5e8500ffb21aeab417705f4856d4ea2724f207c
SHA512
bf23ad4b6ac0b7e9af8f83a0a3d1492e84dc6b18197de7668866df554d9f90be6b96452899a19b0009d583f5ed826768ea0fd659a633826bcf1ed1ec65961466
SSDEEP
1536:jV9l/C0KG8NDuifGwCZFBMrKEqy9AwDhZs9vIVBYLcFz/n7SPPV7cUR7xNezcud0:Bq0K79uifGT1MWEqK1d694YW7qd5R1B9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfd4395924ef93d43b654d359ce67cb5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE