CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a6c035c852bd7b6bc38368231785185f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a6c035c852bd7b6bc38368231785185f_JaffaCakes118
Size
2.1MB
MD5
a6c035c852bd7b6bc38368231785185f
SHA1
db56e1ed3eb678001c6d0e9ef873c87a8cb5076e
SHA256
1f347ab4eddd7b402eaaead5316221a9337318c88b120f7e32cc76a9bbc4c03d
SHA512
9af3df3b2c1213864e7d1aee6864c9af61c805962c6feb7c2dcd405b9134ca22bebfa63962687af64bdb229a912be3408b839f0aa3042727ff59b7e2a0f87c64
SSDEEP
1536:QG2owFRBqp+/6MGzvyoPBjc95mHHsrBkA3DjwqgqmLki:Dhwz0p26nVPdi0srBkwwfh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6c035c852bd7b6bc38368231785185f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE