CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a51665839782a4ba2a11c999d8afaa1c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a51665839782a4ba2a11c999d8afaa1c_JaffaCakes118
Size
104KB
MD5
a51665839782a4ba2a11c999d8afaa1c
SHA1
21b91985aa2e8edd3f723f6648f3cdb174001dca
SHA256
a9120d638528b9d69ffe64ffd4581e99938d845f044fdeb740290d8656d20ac1
SHA512
b5977298eeaf94643cd20dae4c53da92914935b9177df0c3bcdd2baac8e77ebd8deed36b61fad3cf36d5b228015da8e830a8fc2fc69b2fc0633e121c9fd7ac10
SSDEEP
3072:ug5Yoz7sxtJh18QHn6/UNfcYKlxeSGDibuwN9qFQhZB:ug1Xs/h89UNfcYTtc9wKX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a51665839782a4ba2a11c999d8afaa1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE