CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6f98cb23a079cabc55c58bb9c17bc390_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f98cb23a079cabc55c58bb9c17bc390_JaffaCakes118
Size
98KB
MD5
6f98cb23a079cabc55c58bb9c17bc390
SHA1
0a283e4659062e160cf54167f1038b0df186ed49
SHA256
440e11196581faf2ff2e08802a1c30bb2aae7f4d7638d4b101321ca41af92d88
SHA512
288f2522aa9e5211c009a6d382023f0a6d939ab260a831fe413a17967a3bd714c61148296be4f01cd096298121a5b24e337cf90de8a5e9558ab5f64bf7b1c111
SSDEEP
1536:2moLIIWdNE9jv4LsBgI1sAsUOtH7JPAbCwc8W3BpTd+zTMOg/:f2RWdNEp4Ls26sAsbtH7Fwc8W3Bxyk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f98cb23a079cabc55c58bb9c17bc390_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE