CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a33ff7d52fda2140a1abef300a4d89a6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a33ff7d52fda2140a1abef300a4d89a6_JaffaCakes118
Size
75KB
MD5
a33ff7d52fda2140a1abef300a4d89a6
SHA1
b8ae8398a848e159a7b0f4a4f05720cb834a1b7b
SHA256
6b8b2f168db4affea6ada256c1da876eff7b791e12adff3efc24914eaf92fdf8
SHA512
0e2ae9f090eed1740f8fcf98bed469131c90c765e8e8fb16579db265899f26a05ba7477b6c6600fdfede477ae7d4c779d28267d76ed65a23d13c93690783782c
SSDEEP
1536:mu1sAE7XCLGxxe/LmdiJBrQDnNcmMnYdD5QzNC5Bveg:muXE7XCLGxxe6d2rgnNcDnYTJ5B1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a33ff7d52fda2140a1abef300a4d89a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE