CancelDll
LoadDll
Behavioral task
behavioral1
Sample
baa1e39bcdb6a474b78a282ade5551cd_JaffaCakes118.dll
Resource
win7-20240708-en
Target
baa1e39bcdb6a474b78a282ade5551cd_JaffaCakes118
Size
140KB
MD5
baa1e39bcdb6a474b78a282ade5551cd
SHA1
aae54f3c34478c2c9ed29fe892657c7c81baded5
SHA256
d08d9ac2fba0c40ba3373a11c8904bfe2f6f7eea89c3b7e56d9ed2bb79f0edfe
SHA512
7488fe7e7f96229c7e2b5961971237536d0cfafdde7ade85509afea4b4d3827204eec9c3fd4a5fd4f1725c1fa3db825d6190cff3cbcafd8b265699da9bbc5894
SSDEEP
1536:9NEFUaLBF/H8lj2iysuLUi789HRHB0Adf9zaB+xsxGOy:Izj/c92iysVi789Hb/9Q+x/Oy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
baa1e39bcdb6a474b78a282ade5551cd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE