CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b992a50e4581e2b7e88f91a09704563d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b992a50e4581e2b7e88f91a09704563d_JaffaCakes118
Size
76KB
MD5
b992a50e4581e2b7e88f91a09704563d
SHA1
e7c12ad3449b5db71c17d809267ba07837334321
SHA256
d4bb61d40bdcc6faa3e6605a6f6337c736acc38a8dac0fd26931fae1c5b64269
SHA512
5bfd67c2a3e137ac733cc893260bf4214e20c18d8cde27797eb8ac02af7e6079197d900a755ebe94de23c35bdf0149f10fa6b416fabbabe5c599701df351c77e
SSDEEP
768:6pavb/YTMD9XVZzzWpe/GAlAlT9YfB/iH5i9jVl/1bGiuuy/7lHUeyfugpqdb3iK:SAVJ0mWeB/iU9jVldCN71Ue4xgSlVXMr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b992a50e4581e2b7e88f91a09704563d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE