CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac6da38cf26ac44e7d858d8830e964fc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ac6da38cf26ac44e7d858d8830e964fc_JaffaCakes118
Size
94KB
MD5
ac6da38cf26ac44e7d858d8830e964fc
SHA1
480caadf8d29c5987a99ce05fdb3cff94d7c9fc6
SHA256
0a4e4407f43a286f84b14b2e261cc5c39e52f7b7d9a6e2dd5aad26a1369b8ce8
SHA512
8fa282c6d1ceaaf2b865c869491d86d0bec532ceaa2614d59e5da26afcd30d6222d79c83cf63f2072737b12afbce0ea7f90a84657f4a326613fdb32ace7ca6f4
SSDEEP
1536:RosSg4ngB/6hVEJpOg2/1Jgf7hsETHwwxYyl53mMWCvm2l:1SoB/67cugfNsAYeWMWCvm2l
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac6da38cf26ac44e7d858d8830e964fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE