CancelDll
LoadDll
Behavioral task
behavioral1
Sample
688d2ad205509cc07cd77f4a5414d8fd_JaffaCakes118.dll
Resource
win7-20240705-en
Target
688d2ad205509cc07cd77f4a5414d8fd_JaffaCakes118
Size
85KB
MD5
688d2ad205509cc07cd77f4a5414d8fd
SHA1
b93bd47713d554663900d616a4e48c8a40199baa
SHA256
b9798d246ac7b13fed4b4e60b9f89f0ef83af683eebdf2bd681e017f67945de9
SHA512
fe51805ed86b32e57116b919add8f6f0c327f6a3366be88d63cb2bb87755d53b1ea73039b42b9e5fd01c40950fb69debd0b80028f63e78a2a756ccb1de6745bf
SSDEEP
1536:sJVbpAYV9DPWYTCKmJsI6uHi10SK67wPAt7atNnEgJD4qm:sJ5SYVcCCKmJ767iAwrznE68h
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
688d2ad205509cc07cd77f4a5414d8fd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE