CancelDll
LoadDll
Behavioral task
behavioral1
Sample
75d32bea84cd39cd1c1ebd4c09d53307_JaffaCakes118.dll
Resource
win7-20240708-en
Target
75d32bea84cd39cd1c1ebd4c09d53307_JaffaCakes118
Size
2.1MB
MD5
75d32bea84cd39cd1c1ebd4c09d53307
SHA1
663b6a0ff9e86a5ef3cd52a0fc816ce0d95682bc
SHA256
71b1eecf9057e26202f0e2b05458003923bc0d5fb41de133c9714f5e09463888
SHA512
8c76f338cd181643df18e2197404358e18ce61ac02aa79266ba9ef39317d74f21cbefe84508283fde4cedba37e61cf5f10de575511eda45f1a8cbafcaaae3a94
SSDEEP
1536:QG2owFRBqp+/6MGzvyoPBjc95MMTHSFY7ew9PLixVHHVgmWlQX6T2m:Dhwz0p26nVPdiG8Sq19PLivndWlQX69
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75d32bea84cd39cd1c1ebd4c09d53307_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE