CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a6e7bca73150b6a3b056577e9f215a5d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a6e7bca73150b6a3b056577e9f215a5d_JaffaCakes118
Size
6.4MB
MD5
a6e7bca73150b6a3b056577e9f215a5d
SHA1
42d88a19e9b5148c49a4bfc8a09b3551b759e3c1
SHA256
5dfce24ff70c71f897bfaf393de50f63aaf1c765167539b60618b1176734dfd4
SHA512
38325a9c589cb4a9ef4450738974e3538944ce8bc2e11a9cff662abcd4d9e5d653d69089400d1ae2584c885f1f67c4ca9e9fa27c41b3a8d54d042a254da31df4
SSDEEP
3072:OQOiR6fGS7sDOVm0Vn37Oy39c2LGJGmHHEh:OQcGS7sD8dVn3Ok+Eh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6e7bca73150b6a3b056577e9f215a5d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE