CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a10cbff9a35eb0839f3230321362cdd2_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a10cbff9a35eb0839f3230321362cdd2_JaffaCakes118
Size
97KB
MD5
a10cbff9a35eb0839f3230321362cdd2
SHA1
54184830da98f326fe7f115fad46a4687c024ffc
SHA256
258f14e6ed6a6a24ece3c099d7ab0203328179ed723cc83a2bdb4e6ab59f71e4
SHA512
6fc7187dbc787e53e0e1eac21aaefe313b6aa3f502ed25a4d8d23164a05cda36c19cdab3f3840a477c9338299d2b4ad60f7a066266e83927adb38518b0fe63f6
SSDEEP
1536:YJpsqgQUNFs/L3BBJ42zOPdohCCrfO5pXHOptJqedVj5b2OC:YJOqgjs/L37J426OCFXHeDL50
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a10cbff9a35eb0839f3230321362cdd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE