CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b5e5838fd69be30a06dfcae40247e3d5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b5e5838fd69be30a06dfcae40247e3d5_JaffaCakes118
Size
90KB
MD5
b5e5838fd69be30a06dfcae40247e3d5
SHA1
12fe579d3610c68fa033feb49c9333f594bccc74
SHA256
f3503a6f6cedf0323ab946b6a160f04bb1d39ffd952c2205b3ffeafc7b937c0f
SHA512
3627d8f15328c6aacf883ce787d026b6d15d918f16f4c8c05552834970ceadaff135251f7f68e305393a3249af89a2120ac01ddf77a37756bd42ac1cf682e24e
SSDEEP
1536:Zn4Mi33LS7enDxBfA712ZP+Os5t8aTqFZe0iT4xRhn77K9zC:Zfi3b8enD3IhvOswaTq60iu977K9zC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b5e5838fd69be30a06dfcae40247e3d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE