CancelDll
LoadDll
Behavioral task
behavioral1
Sample
93ed222962d3d02412a93bd20fb8d1ff_JaffaCakes118.dll
Resource
win7-20240729-en
Target
93ed222962d3d02412a93bd20fb8d1ff_JaffaCakes118
Size
117KB
MD5
93ed222962d3d02412a93bd20fb8d1ff
SHA1
f16160ebd0e4344bd65efde49eb41b8a0f5c1598
SHA256
ccc9a19f1b631f7a486dcb001e3f4cc6c1e769e99e458cbde08cc70432812ea4
SHA512
89a28678a2dd2c3e5e3551023829b2ca7aa30825a53c4e8bd46d314c0eb2edd477cf49fc281bc6c61d874b2e897d1f4776ff39a3d9c4d64f9810534656a01dd7
SSDEEP
1536:INWujxA5EY8fwKV8zL5vHJtwkUKo/EIegWx+9EidbfY7M01pFHM1b4P0/Y:x/2Y84Csftq5tPtmefY7MgpNM1bHQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
93ed222962d3d02412a93bd20fb8d1ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE