CancelDll
LoadDll
Behavioral task
behavioral1
Sample
af51fa77d586fccc5e71f4218c02d10a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
af51fa77d586fccc5e71f4218c02d10a_JaffaCakes118
Size
99KB
MD5
af51fa77d586fccc5e71f4218c02d10a
SHA1
ab0bcf7c802c5d2b0624067d5083b9d5c7905e39
SHA256
f88b07bed4e174cee00550a2d8b69eed1d3f08a5c896b140a598e9d3d582f66f
SHA512
16bdf470af154cd1a1ea2ab93c418832382f85f893b4a7fc5a115a8c1bd951ec852ce28f2c6a9e10937279c39301df9b2d8d74bee39b1b1e221ef95f09cf8b12
SSDEEP
3072:0OtFNv/r7r0qj48scYEg6CiU96mw65FFu:0Otbj72ZcYEU/Q65K
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af51fa77d586fccc5e71f4218c02d10a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE