CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a8833a95ba5c4f7c2b399695b034b0ca_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8833a95ba5c4f7c2b399695b034b0ca_JaffaCakes118
Size
108KB
MD5
a8833a95ba5c4f7c2b399695b034b0ca
SHA1
2c9c8ae8b624f5fb866ad7c6427f60d4c7b487fd
SHA256
628dc9decb3418ccefebd2d36f315046db5ff278b05d43827dbd68b396633811
SHA512
1e4b83d5d004dc784b64ebb450fd0c3ac575683428dbd3e258c41041be8c605c4f562af9b1ba4068065d45dcd3a6122252ca4a41011621978f1e8d2d7dd95ce1
SSDEEP
1536:pySXN/9GhFgVhQgN4+psBuKZSU/MQbue/5jtGbnUPNiwdExBbu/oO3:pymhYhCqgNzpUdqQCeBMoZ+/buAi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8833a95ba5c4f7c2b399695b034b0ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE