CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7538b0e9a6af4cf2a3e417faec883f86_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7538b0e9a6af4cf2a3e417faec883f86_JaffaCakes118
Size
89KB
MD5
7538b0e9a6af4cf2a3e417faec883f86
SHA1
a3eb94363f818beabad53879b502889fb6221fa2
SHA256
0fbe639ecfd84e4df045b6e42654d89b7a1ca2956d66c6b33346e01d1c985e51
SHA512
fe49bbe30f21c78a27629693e9b80ef6a6b5b867289ec0a4a12a67587c9c2aed3d515b921732faca7f9587c96d1dcac8e28fca0b99d3cd5575ba1854b0d306fd
SSDEEP
1536:XpoZectu35iLnGlfahGyLsP0PxLeQTJKkxOO4n1KkKufQZyxR:XpoZP8ijIfasyLeOzZxYwkK1sR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7538b0e9a6af4cf2a3e417faec883f86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE