CancelDll
LoadDll
Behavioral task
behavioral1
Sample
831e4662a74b4aee2d1974836f390e4e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
831e4662a74b4aee2d1974836f390e4e_JaffaCakes118
Size
121KB
MD5
831e4662a74b4aee2d1974836f390e4e
SHA1
b7157535e2b748242a4bf8624a7699276d160117
SHA256
e06b9ba564685fd2f54c7a887780b452e39472081b2d1d84766720b939fd464c
SHA512
e09cb2c44c10fca591879498398fe7ad7f50c3176720107d6ed92daa6816b9f230d8dfb3a673df61c221a6b6b9c6879744bc523f10122df43f88d397fe45a704
SSDEEP
1536:AHEkUaLBF/H8XE+1JtcqQubWQeA9lzTkHPPAvo2is:vEj/cXE+Rcq96tklHkH3Awzs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
831e4662a74b4aee2d1974836f390e4e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE