CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b386e39ef18c68dfcea5f4baa710cb32_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b386e39ef18c68dfcea5f4baa710cb32_JaffaCakes118
Size
111KB
MD5
b386e39ef18c68dfcea5f4baa710cb32
SHA1
2142f4d0741818a1c62d4978dd449e3b30be1386
SHA256
b2b15b94a9feff504cd2a5ffcc6defef37e117db38a54724085da2889c69ffb8
SHA512
7642b3c9c708dec86dbf9d555b7f906b13147d60a558ca7093e4f16c760c88c6c18a87ef7efe3a712ced752b3915133ceca3c41f93b865d00d2e34cd9f749321
SSDEEP
1536:Zn4Mi33LS7enDxBMBqnEvEcWhuWvpCFs6XILuUsZ1nWyI5jKdCIPmEtsUf:Zfi3b8enD3p6xWhuKl6+uZgyE8xf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b386e39ef18c68dfcea5f4baa710cb32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE