CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b24dbce0bd51857ea2bbc1aea00f8d55_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b24dbce0bd51857ea2bbc1aea00f8d55_JaffaCakes118
Size
108KB
MD5
b24dbce0bd51857ea2bbc1aea00f8d55
SHA1
66020c477d0745f9fe61aee159873a8d342e78e4
SHA256
6cb34e209f6dd578d38c96f07a8348e5961aa587276ab3b3bb4caccdd6bbdcdf
SHA512
331b5766ac8fa397983183ded6f9f888b1d9357bff1b66598732f979567b2a6d24625f9fd2e92a5dd90e21e9d4c297257750aff22e6a9d4fbf07586a68099a7c
SSDEEP
1536:/xLK2OReR3CHB+lfxGVN+cb8Au4UDGAwYu4KHqxJrT3aPA0dDT:ZVOReRyH+Zmb8f4Uhe4KHiVaPZd/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b24dbce0bd51857ea2bbc1aea00f8d55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE