CancelDll
LoadDll
Behavioral task
behavioral1
Sample
73740ddaf56aca3567b84e113f9151e7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73740ddaf56aca3567b84e113f9151e7_JaffaCakes118
Size
89KB
MD5
73740ddaf56aca3567b84e113f9151e7
SHA1
6e5a82aab249240e4faba41810a60226558ca665
SHA256
9e93b6ec799a3f4c92b7007303270965e0b31d5c572f6773e1e1b2bec97eb59c
SHA512
1446a1e597f13cecc1e29e52a279215c979bb08af4f6b7c4b485f2dd351a1be9e02ac73fb1a0dee4adfeb4a542b97047324cf1427c36af3b6a0fac2844e09fdd
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8yPe6mb4iaSvaNQOtF23exEN:FfUxhDtZp8vIdCFseFb/anbg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73740ddaf56aca3567b84e113f9151e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE