CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8478a34eb2c5cbd941c26dfd3f87c2de_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8478a34eb2c5cbd941c26dfd3f87c2de_JaffaCakes118
Size
79KB
MD5
8478a34eb2c5cbd941c26dfd3f87c2de
SHA1
d7af466dc3526d495f7b6be7115e94c54f132de9
SHA256
3dde242a35067c2acd163e10fadb238b2c5a2e6215041acf2813062fc43a290c
SHA512
de40a4572ae866abcc3850756663fc23bb5ca7192ef6b6b2ba46a4f6e7d81a81a81b39836bceed3ded2c5571b107379ccd02f8830f286ef786d0dd4cc74eacdc
SSDEEP
1536:aI9js9B05V54qMzZ2W0eHHK3CxZI9H4wikyE06:Xjs9B6ABzZ1HNI9H4wTyEd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8478a34eb2c5cbd941c26dfd3f87c2de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE