CancelDll
LoadDll
Behavioral task
behavioral1
Sample
94feff55e1d8196f91b03bf921312e77_JaffaCakes118.dll
Resource
win7-20240708-en
Target
94feff55e1d8196f91b03bf921312e77_JaffaCakes118
Size
102KB
MD5
94feff55e1d8196f91b03bf921312e77
SHA1
655c3b15f4670b56d69f84f1db9c988ed849d931
SHA256
d9c91a2c60db81b7ab3839c0a07086dd31c14a0e12c8c5d81569abcc7341ffef
SHA512
72424292fbd689ce4a32570617e0ab9a14550c562cb2dee828a1e7b5d7a0ca620e2a9dd558a61b6f9f12f929ae6f0a291204b145d357103d035ba4b1f583568a
SSDEEP
1536:/xLK2OReR3CHuxasVxnkfX+/4RYWt0D6iQBEpiUsblK0l6mAu:ZVOReRyHuxqOm746FKUlKVu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94feff55e1d8196f91b03bf921312e77_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE