CancelDll
LoadDll
Behavioral task
behavioral1
Sample
964dbd8663ba1f7dcee3242dacaff06a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
964dbd8663ba1f7dcee3242dacaff06a_JaffaCakes118
Size
115KB
MD5
964dbd8663ba1f7dcee3242dacaff06a
SHA1
a1a7088f469a4d1b9cb65d41385d66d7e43712fe
SHA256
b0a63f4381b1f01e7a0a638155269f11b864ab387b984af8345a6be4fb5db5d6
SHA512
863fbc3128d9f96d3ef24f84c0d2935e92b7474120709d73cedf396cecebf1f790d4115d090e202f5db624464c7fc69eb6966a501f612e1385d0aa2682fbeb18
SSDEEP
3072:OB0BTYCsiAVvQsu1XrRP+kz7gJZnry08RWqRN:OBakC5Ayl1XrRWC7gJZrgN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
964dbd8663ba1f7dcee3242dacaff06a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE