CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aa5cf0e696d8493aa8a10b9d107e62df_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aa5cf0e696d8493aa8a10b9d107e62df_JaffaCakes118
Size
111KB
MD5
aa5cf0e696d8493aa8a10b9d107e62df
SHA1
5ae367fa5f90d9622cbc1d0831a51f075a2b2556
SHA256
9880d235b422e565ac4e05ffdc0070796d4bca2e1c085dd2d0f0e61ffcdcec67
SHA512
6b385f9d270a64ce5304c81333b954ff70e613aaa978b57d4e8f9f6eef188220b58b939fa953e24aaf155ac5923affcb3f35c21951e33083f5f0887ae4b86107
SSDEEP
1536:Zr4dVzqJdgJhjJKSYDyFmebZ4UopInuq4ZonuOOthLmvrGi7NT/cT:ZEdVzq4/j5RFdNHucn4tJmvrGi7NzcT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa5cf0e696d8493aa8a10b9d107e62df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE