CancelDll
LoadDll
Behavioral task
behavioral1
Sample
87ac8183fc69924b1e5501b650a5d80f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
87ac8183fc69924b1e5501b650a5d80f_JaffaCakes118
Size
86KB
MD5
87ac8183fc69924b1e5501b650a5d80f
SHA1
2f25dbcf908ebf80fa1c1a80b7432d3204ef4e10
SHA256
2b6789d7be5bb503d9c3c892386c51104d9961c13eabea13a3a6f6168886242a
SHA512
a2ede2f46521327267397e53c7877296f4091c27ae8c72b654ee0aab73b7b35c248cdd6f3d01c2ce17bec0a5485322760abe2ec1d9a4164b10baaaba798a5d3b
SSDEEP
1536:/xLK2OReR3CH7q58S91MRl0pjqF5SOKYEo:ZVOReRyHeKe1X5qFgOKm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
87ac8183fc69924b1e5501b650a5d80f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE