CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac1757efb18cb6b14f36fce4b82dd26a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ac1757efb18cb6b14f36fce4b82dd26a_JaffaCakes118
Size
78KB
MD5
ac1757efb18cb6b14f36fce4b82dd26a
SHA1
055ff56366016119c16f7b2b6ed2363b3b384242
SHA256
392db9c86b525dd1a14efab4be9b21c1c83fbd4cc81c446ab8519e292a05e5a7
SHA512
1eecd7353f52c594acdb5d910c5961fd7218a32524258251db7171016ea0c720fbff737620fb7b1204c5368a864db2edae4d6d149879a2b4565e4d529fb248fa
SSDEEP
1536:stVbpAYV9DPWYTC7mJsIBBQcfe2WOwdU1Z993jmgc/:st5SYVcCC7mJ7BB78UHTmz/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac1757efb18cb6b14f36fce4b82dd26a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE