CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a9f99011ab4ec6ed1b49062e5ab3ef7e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a9f99011ab4ec6ed1b49062e5ab3ef7e_JaffaCakes118
Size
74KB
MD5
a9f99011ab4ec6ed1b49062e5ab3ef7e
SHA1
525b51494b3fc6de4ee3152e15a0c05028e4bff7
SHA256
3d96e4b1da808db6a94b72dd317221fac13eb7035e0fe73e2f1633ea699d78f3
SHA512
9ddeecfce07f966277a24825da80c1117e8fda5152e6a734eb17f71f7455919f815947ba62e3c4365f0feadb6e9a6a8bc17b99ed3ee18ebb10b517e43b8ded4e
SSDEEP
1536:aI9js9B05V54qPrDhqvhyY/kI4xZLVBY3X8XZam:Xjs9B6A+FqpZtUhVPXZP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9f99011ab4ec6ed1b49062e5ab3ef7e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE