CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b7bea5fd42c3b0c2da0036e60c079933_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7bea5fd42c3b0c2da0036e60c079933_JaffaCakes118
Size
90KB
MD5
b7bea5fd42c3b0c2da0036e60c079933
SHA1
6921c9c59262e7ef00b6bd87182765e978ae63d6
SHA256
cc6484d556576ec0c48681e00ba8e3d62d1eb4e451333ba25b2dd82f2f921e29
SHA512
9bbd487168257eea0e0b800276effab47ad99bc45ca17f9ef56477b98bf0a0478e9173127e034edfef1e3e5a5583daed725499c936e0d551c64b30c762b9a042
SSDEEP
1536:j/7tY+plsUPpUb+ZLU0/FwKXDhZIHj9aJQwbeH5YN+j6ZEXFdva7C621YsA1Z0:jDW+plsUwoLU0tP9ZlL6H5u+eWa7C62d
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7bea5fd42c3b0c2da0036e60c079933_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE