Outt
Sett
Behavioral task
behavioral1
Sample
d496eb3fe4d5fbfb08a3b1c14688aa19_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d496eb3fe4d5fbfb08a3b1c14688aa19_JaffaCakes118
Size
85KB
MD5
d496eb3fe4d5fbfb08a3b1c14688aa19
SHA1
b29f81aea12ed8dabd1b32935a7aa8a92e20e79a
SHA256
a64696b1999dc956552ab41db652790d82c992d9b7744ffae3e1d817d0fc08e7
SHA512
209892b2fe12d04d1243202ae7060570c038e122d05aea2fe88691b2412fff90738462eca590f24848368c4fd50845c548248f2fbcdb817ef19b42cb7f007e22
SSDEEP
1536:2ZfRBV0QVXvur5Yxp8nOy4Eo2yZooev58BUtan:UfRBuQVX25YxpqOBEoV6oev6BUtan
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d496eb3fe4d5fbfb08a3b1c14688aa19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE