Outt
Sett
Behavioral task
behavioral1
Sample
f5f6e2d69307bf6774a7e5e6c8d673d3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f5f6e2d69307bf6774a7e5e6c8d673d3_JaffaCakes118
Size
2.1MB
MD5
f5f6e2d69307bf6774a7e5e6c8d673d3
SHA1
1e0cac116feb8ba5261dfda752d27222d04a3673
SHA256
2047d69c15bcfc3c91867767c1ff0c696266843ec2da1683032fc7cab77e12d7
SHA512
329657a6e971eb635c809787f4735359438f80f48e45ad22838c4d47876a80061ba84514828b43d0ce071cd7093b337f20dfc41b7912e07f37b8bc5a3005af38
SSDEEP
1536:bxJl2owFJEZ6LieE6bQSACB29z3A4/7PHHZRIiO39JRMEwJn6YZlipQYa7:b9hwbC6LjEaACQB/LH52hwZ6YZl2Q1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5f6e2d69307bf6774a7e5e6c8d673d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE