CancelDll
LoadDll
Behavioral task
behavioral1
Sample
836102fa669ec531066ed28323f1ecb6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
836102fa669ec531066ed28323f1ecb6_JaffaCakes118
Size
101KB
MD5
836102fa669ec531066ed28323f1ecb6
SHA1
0b7515b4cbaee0404712bc89069a332466535967
SHA256
91a84f826147dfb807b8d173647cd2ca6b38ff85e17615096480d39faac117c5
SHA512
226c347236a907c727b77a907dbf07c70e7c22c55e5ba59440a3f89a311febc66a8a4acd5b4efd67af5b057fcf7fc7f11302296c7447009377fde8efd8be4b8c
SSDEEP
3072:0OtFNv/r7r0Qqulfu9lwynSZY1qOfM5vnJja:0Otbj74PnSi1q+Mr2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
836102fa669ec531066ed28323f1ecb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE