CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a2524061d858884bb102c29c8eabf386_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a2524061d858884bb102c29c8eabf386_JaffaCakes118
Size
92KB
MD5
a2524061d858884bb102c29c8eabf386
SHA1
7d8db285e13fe1885502efe37ca6cff9813d663d
SHA256
49c65491461fbd78dea23dded2ed0c1b23c3419882dd4cb7723b5cbefc567fd9
SHA512
804cf0d162f538ead31b008da287d672b052b71567ddba17eb37e6312c03ac7c500f8b27823293c9cc874e20767678bb287b7df4a14ccca3ca52bb647a681e2e
SSDEEP
1536:53/5hksBgk16zIUiHaeJBl9UaFpF4zN8TMbqOWr26YnXp6tHjG:53/5Su16zo/l7FpF4QnYXp6VC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a2524061d858884bb102c29c8eabf386_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE