CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a35b5bf9495d904543ed8169e0e34164_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a35b5bf9495d904543ed8169e0e34164_JaffaCakes118
Size
102KB
MD5
a35b5bf9495d904543ed8169e0e34164
SHA1
e9435dbae1d70d57886437c20d2b45391304e780
SHA256
beb2e8df6d0d3709dfcdfb3d15216ca174cf3cba426a20959c1ba44f6a3d1983
SHA512
4bb37fc6d6b46c65e8c7359a4ee48869ce3b9a987baf854202cc16fd733857b17971d281ab80e58e4eb1346798b6880d5edd3881350a1d1c35ca43d433e0a884
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqeyh0sxLxGUne5YUP16MADOv3Qw:l9L1xm6hpbVcd/eNN0yIw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a35b5bf9495d904543ed8169e0e34164_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE