CancelDll
LoadDll
Behavioral task
behavioral1
Sample
af762870f67960b605c0bcb26bfe8851_JaffaCakes118.dll
Resource
win7-20240708-en
Target
af762870f67960b605c0bcb26bfe8851_JaffaCakes118
Size
77KB
MD5
af762870f67960b605c0bcb26bfe8851
SHA1
457920516a4406477be4d2908c24b8f7fa4a4d09
SHA256
dfc9a59f9a956c60ba0eb9058585c7805db89a114f8a9e932a4f7c8938711b5b
SHA512
f6e97db00bd0f50abae7b7ecb34c09c6b15335a5b034d4f4e09122ad29d5b464b447c5012f143ffe43619d6994c174b9c657861f6330bbb0becfb4eecaf07a5a
SSDEEP
1536:2moLIIWdNE9jv4LsBgI1l9eWD2AhxKTaBc4xUdI:f2RWdNEp4Ls2IPeWqAhnlZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af762870f67960b605c0bcb26bfe8851_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE