CancelDll
LoadDll
Behavioral task
behavioral1
Sample
70fa16fd9edef248cf3ae67fa5dfd839_JaffaCakes118.dll
Resource
win7-20240704-en
Target
70fa16fd9edef248cf3ae67fa5dfd839_JaffaCakes118
Size
89KB
MD5
70fa16fd9edef248cf3ae67fa5dfd839
SHA1
6fb702ea7ab6c60eae3c6eaf2842c34358074c9e
SHA256
092ecd55009788927476b7d42fc744c908446b671bc4567aaa926b180b42a56a
SHA512
95b6e57e43195a1d536893f3ff89a6ae6f3881ac0780495602821b7004215cd0c2fdd0c7bab770271b82208a2ba64b460f3150526d8a96121c1ca3f1b8e7b143
SSDEEP
1536:enin2eciGfPpHupEaXgPtwKfum0mf8g9qzgL3Ck59IqC:D4iGf8bXgPDfZ0mf8g9q0LFIqC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70fa16fd9edef248cf3ae67fa5dfd839_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE