CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b33accc56e5503458b10bdd65191c9bf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b33accc56e5503458b10bdd65191c9bf_JaffaCakes118
Size
110KB
MD5
b33accc56e5503458b10bdd65191c9bf
SHA1
f3a5e766b697473b93fabd48ddb6c124251ad422
SHA256
d959803ab8ef73a220221b2e1e8fb111401ac0427a0dc16e27c7e610d7e03a6a
SHA512
a9dcc25b2fde2719f457d62f9efa9b430de3ac0841b427ab8c17c7085116bda6423b956e5cc735fa5255201d4ff90ec5b5b7bc84117bdfb1e06b9bb88134ff95
SSDEEP
1536:AnSIWWZU3mEoDYsn9TbIFTPOMFlC1DvExm0SzVQ1XnjLbz+XV8D2:ZF3mEDsn9T8F7vFlCRvEIHzS1Xnj6U2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b33accc56e5503458b10bdd65191c9bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE