CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a470964e2f618532f3818aa6c5f627e3_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a470964e2f618532f3818aa6c5f627e3_JaffaCakes118
Size
105KB
MD5
a470964e2f618532f3818aa6c5f627e3
SHA1
9c7d3e2f7d0d3eb70d69c1b84d02981ccbd4a8f4
SHA256
e55f855ca8469d7b2995dc2ba8451ea8c939ed0cffdeb66d18288e2a81910a41
SHA512
e437f22227b330fdf812d77e44fed743ab1863407d51766c0adf49ab8e665486f56d4f5ff7f07d11a20b067cdbe5038b25b7ee8119db2ebaf36b80e893a4eaae
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqOGsn9ykzcLoMTt1dpTNj/4Kbf:l9L1xm6hpbVcOd9Qd5NL4Cf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a470964e2f618532f3818aa6c5f627e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE