CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b2b080e39658509df2a95ff8e8d992d0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b2b080e39658509df2a95ff8e8d992d0_JaffaCakes118
Size
93KB
MD5
b2b080e39658509df2a95ff8e8d992d0
SHA1
95bbb15c248cd54795f6c28a0721554a7e4df326
SHA256
e5c5e7a588a1016e7444b99bb14e179c767e5c635769dd2e35a8f3e32e194849
SHA512
8fb96b4cb33426c4c10a7945c83db63e18992607454e6b66d4cc32511767b19074732f1c0deb2313f8c8e083687f5dba3920ab8fc5f351c2f01d1d8efa225a7f
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvuz7Da46AX8pmtoSN4yR5Jt09YLf6ZB1mn7ucTiPAh:6SFMDgVswFLdNUa46NpmiSSFqfCmn7TT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b2b080e39658509df2a95ff8e8d992d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE