CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9520bb8e4d43b3fe352ac1a7011f5477_JaffaCakes118.dll
Resource
win7-20240729-en
Target
9520bb8e4d43b3fe352ac1a7011f5477_JaffaCakes118
Size
2.1MB
MD5
9520bb8e4d43b3fe352ac1a7011f5477
SHA1
51049e0813dc4349d0dba85d5fc178705ee5d0bb
SHA256
2a3b1763a598a413ffecb5288c04c4c5ad1fcc57c3f26e6d69213a633ae1291f
SHA512
24d19993308070ed65b7a48646dfe6098c94819c0b416453c7e8f10db8dc74ee8e38d204bb6da1ee4f855731f79490b1c627c954296ee70b816e296b8ce177ce
SSDEEP
1536:/fLHm2owFYV0bB+MvkWfBDMUSBnHqUzoIIuE9MPbD/VWUxed:Tmhww0bB+dWfllaK2ogEaPNWXd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9520bb8e4d43b3fe352ac1a7011f5477_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE