CancelDll
LoadDll
Behavioral task
behavioral1
Sample
95eb7ca0a58f09e35d51092d08522a43_JaffaCakes118.dll
Resource
win7-20240708-en
Target
95eb7ca0a58f09e35d51092d08522a43_JaffaCakes118
Size
102KB
MD5
95eb7ca0a58f09e35d51092d08522a43
SHA1
a4391abc0588d20335fd4bd787a5e9947ae15a9b
SHA256
c772579716b59675a5a5772914ca00b8984befe7e5f3d6891c1d0b79211a0b30
SHA512
c3656490391bdf3c347a55391ef8b9222b5e25fec6e41ae559390b45390d09e3fdf267ff738b84e130f08ee181e0da7797c423962b87cfff15b2a52a30be6263
SSDEEP
1536:OoKR1YFY/H4SXxyBvaoAqsmyX0YzR/c9iBrPaBlOTu5ZfBnJ+dqL:+1YZSByxaoAq5yk+gSrPYlOC5ZfBnIdK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95eb7ca0a58f09e35d51092d08522a43_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE