CancelDll
LoadDll
Behavioral task
behavioral1
Sample
70ce89e585c10ceb12868b8012963f9f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
70ce89e585c10ceb12868b8012963f9f_JaffaCakes118
Size
100KB
MD5
70ce89e585c10ceb12868b8012963f9f
SHA1
cc372bc7a57ff6329c86d6a5c08149ee73072639
SHA256
7331df15986c411dbdd80227a6e15c7e0845a551d576ad04eda3bcd84e5f7ef5
SHA512
167e7d4296feed4b3bf06a313e95930338b52f70f4dfdf3aaeba4faae9228b7270efce608e7afbed62ebbe4fbb64f2c9d62fca519b23d670afad304a775f1716
SSDEEP
3072:XpoZP8ijIfasyL8eRwwLltHTUKq+tL4LS39RYt:XpHiuaLRwEltHzq+1gARYt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70ce89e585c10ceb12868b8012963f9f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE