CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac2b53af86e45dc5ddd271794eaab769_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ac2b53af86e45dc5ddd271794eaab769_JaffaCakes118
Size
86KB
MD5
ac2b53af86e45dc5ddd271794eaab769
SHA1
b1b4625946f635bdd43433caf1554bb70c6cb318
SHA256
2e9a8899165a0166e68b2b723d940c42c4a32931598a789ada238b5f59b1b874
SHA512
ed41422624f1a9b5536924a479406ee70d50ee16b05babae14e5e5b2b8d7e7bf7cea038fc044287ccd153bf43986b116f21ea75bdac62db5765d174fbc93b559
SSDEEP
1536:Nr1O1I7ZMTSrnTtanLJbETtynfWG92IZreoYD/ll:N9KTSrnInKynfkIheoi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac2b53af86e45dc5ddd271794eaab769_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE