CancelDll
LoadDll
Behavioral task
behavioral1
Sample
93c131379152e3daa80b82375e692042_JaffaCakes118.dll
Resource
win7-20240704-en
Target
93c131379152e3daa80b82375e692042_JaffaCakes118
Size
102KB
MD5
93c131379152e3daa80b82375e692042
SHA1
b25b664220a95f14f96ea38da9635dc818ff392d
SHA256
3316a5996ce38023ee8cddd43dbfc8f16b1d456f5b3c37668d23e4eccf8ca111
SHA512
9fae65c740c78baf940fadfe2d9ff71f1e2cced8c72e4bd7c1c75022c94b29652eea48b22896f5fc5090930e79aa3e410b6bb0cf152df2ece11ba3ac0a7eb233
SSDEEP
1536:7rOUbmJ/ZS8DDfBzYRxcrqb85eZxQ83QmJpGceRuMjVQofmottH:FbmhoODfBzicrqz7RAKSu2QTa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
93c131379152e3daa80b82375e692042_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE