CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a9a5b62b425c908a164563de2133a3bc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a9a5b62b425c908a164563de2133a3bc_JaffaCakes118
Size
100KB
MD5
a9a5b62b425c908a164563de2133a3bc
SHA1
4af34d32221e26df0f5cec6f019c431acdabb752
SHA256
57dee9c9108b83db777c78933211d99b117d81ec1b1d6a86bb0a8093abc5b14f
SHA512
d8a9aceb01717f7aefa024be51fbec27880f099ad43b244995257419c65e6ae037a7338a0adae1068f95c674e7d9f2bee118e43b481f9acc7abe950e2d351a1b
SSDEEP
3072:Ud5W8kw/jdt9YDJyCHDXcaL4ZqOk28Bh21r:Ud59bdt9sxHDMw4YT28Bc1r
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9a5b62b425c908a164563de2133a3bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE