CancelDll
LoadDll
Behavioral task
behavioral1
Sample
882915cc90c132c707e2bdad28df856a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
882915cc90c132c707e2bdad28df856a_JaffaCakes118
Size
104KB
MD5
882915cc90c132c707e2bdad28df856a
SHA1
55a32f86f544ad592119b58e7cae14e532db3a3f
SHA256
a4dc3dcc56d746d80e8110e22025ec6cf734bd769892ce01c44b9cbba2504904
SHA512
29280a16fcd2f07ef060145c425b312816019b2e4589bc70132f7f538381403dba4f53414ed1796ab2a938d8cef4c5744ba8a0345e8ced7f0176dd6a504fa891
SSDEEP
3072:x/2Y84CRXZY6L4JTuTaLKvX/24kf6SRN6GgP1GKH:p8/ZY6L4J4a0nu6SRmP7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
882915cc90c132c707e2bdad28df856a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE