CancelDll
LoadDll
Behavioral task
behavioral1
Sample
78e1adb9d7dc18d5764303c06b0f4fab_JaffaCakes118.dll
Resource
win7-20240704-en
Target
78e1adb9d7dc18d5764303c06b0f4fab_JaffaCakes118
Size
107KB
MD5
78e1adb9d7dc18d5764303c06b0f4fab
SHA1
fddaa2c78d81be1a486cbbbec5fa899c8094f36c
SHA256
b625b646caae7ed83a732e5b3051cd313b7225597d04d5b02ffd6a68d1ab1ca5
SHA512
a475f6d09d0dc9059913bce239e2b5d06cc82902c4c8116a3553b6fea3aa50027a91c1ee94ab206797f7bd2b4a7926886c644314394167238e0bea3859ec83b6
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCgqbOJtk3PBOCNEjTXo4cJG+eysyiyqZX/4:Ud5W8kw/jdt9YDJyCWk/p4TYNJahDhu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78e1adb9d7dc18d5764303c06b0f4fab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE