CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ba65ac9f9ed0cf609b5f601192dbcd8f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ba65ac9f9ed0cf609b5f601192dbcd8f_JaffaCakes118
Size
91KB
MD5
ba65ac9f9ed0cf609b5f601192dbcd8f
SHA1
40173270ffa2f6f4a2822d050719109e77e2474b
SHA256
945762e8cfabe0a3847ef376fd5d75638c51921c176fba80321365d032d7f10a
SHA512
c4103a1ed5104fcfba159992fc6c5971663e39fb6363dd8910361e6d31b50956fcde58b7ad44d427280b267293c83a07ea10bdb15dc70368ad792758fb9cb415
SSDEEP
1536:TpoZectu35iLnGlfahbfLnWwpdTrsCkGSbucmnVvUZNKVRjd+JPVQUdG:TpoZP8ijIfaBfLn7DToCkG2OnVvINKVV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba65ac9f9ed0cf609b5f601192dbcd8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE