CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8c4346523dd09a56d5859824e821b0b9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8c4346523dd09a56d5859824e821b0b9_JaffaCakes118
Size
101KB
MD5
8c4346523dd09a56d5859824e821b0b9
SHA1
7a1897a377a818c1bb800ca32f7a5b5505a2ef8a
SHA256
07b87ace5ccaa1e4a88009869a3c98dd33f4465147b247e61762a29bf2fd4971
SHA512
8a9727337d6a1cda7d506817dc28e27a38236ed80c354094a28a189c867128a829d4ec1335157f82838306c248ad0db0ce9b1c36c1ffa77b535e1f6b1f2b9469
SSDEEP
1536:MxvNbz0ZBTYCsPvMM33G5kF/ZaNAiojvSPkxs1BeKAWJzsdZPbsXt/C:OB0BTYCsHMd5S/ZB70kxsTe8WLzS0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c4346523dd09a56d5859824e821b0b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE