CancelDll
LoadDll
Behavioral task
behavioral1
Sample
68ebf1b97ecbd9d5825321d34422af69_JaffaCakes118.dll
Resource
win7-20240708-en
Target
68ebf1b97ecbd9d5825321d34422af69_JaffaCakes118
Size
91KB
MD5
68ebf1b97ecbd9d5825321d34422af69
SHA1
45170bfe9c51c168ac75aad53f1f401b4640d890
SHA256
3b426edcae820d091f5152f3d730d53bbd698aea5164ea43fceaf5b81a3ef87b
SHA512
d2e32fd18aaf138d90e4ceca3a103f839f1d2068d21a40f8c38bafd2c7e16a6d6d3346c8f822a4d85071bff843184295350a2048eeb040747147e61fdd3747bd
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr7D6pw4OuaIuVvQXJjU9Ys8f5+e8oq:03/KeW8V3rQsD6pVObIkPkfvPq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
68ebf1b97ecbd9d5825321d34422af69_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE