CancelDll
LoadDll
Behavioral task
behavioral1
Sample
70ad19de7d56698b3d171d539628ea90_JaffaCakes118.dll
Resource
win7-20240708-en
Target
70ad19de7d56698b3d171d539628ea90_JaffaCakes118
Size
102KB
MD5
70ad19de7d56698b3d171d539628ea90
SHA1
af75a9dd55ecf8ffc1b7a01d7fe0d3ef51519251
SHA256
f836bc7d3ff73fe006c44c5e0d07a790625c9377bdc200f8f4002fc318366624
SHA512
1c384235e61d9511d84b00cf98341cf57b01157065b45b5ac1acc694f870966b2414a5565cbe3ecd21dd03ddb78a916014571fc10f489a924ca53c71f55aaa97
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjD5nZtOOz1gg+20fUYoQS1O5HRCPL0G1xezU/WOJIV+o:7RCVcAHzYRjD5ZRE1UYoZZj0GuOJIQzs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70ad19de7d56698b3d171d539628ea90_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE