CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a051daf9c1bdb288b97c883513ed1879_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a051daf9c1bdb288b97c883513ed1879_JaffaCakes118
Size
78KB
MD5
a051daf9c1bdb288b97c883513ed1879
SHA1
00f89427986d19ee2e08762316af608fa4c9397a
SHA256
98c325079385a8b1100c79e484f83e453ccdf5f48b620905d0d8c4459c00123b
SHA512
615f7fa634604bf7caef74ca988d15f93cbe7cb8e9994dcc817649c16911e276a51af7469db09edabe4a717845d78c237093f65c5d7a01f2d691b32568e31102
SSDEEP
1536:aI9js9B05V54qe+ImTkR8qAfzktYK+O38rVdd8G2yYDW1vis:Xjs9B6ATmTdzQ9+OMRAyAo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a051daf9c1bdb288b97c883513ed1879_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE