CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bb23b5639aba146b038899aa87c72ad0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bb23b5639aba146b038899aa87c72ad0_JaffaCakes118
Size
95KB
MD5
bb23b5639aba146b038899aa87c72ad0
SHA1
652bd087c32da9161b1adaa7e6bd3426e7785c7d
SHA256
f7766647c1d5b4d0446b8e89a7a047e604fb9a2803a90a543b421f48358c088e
SHA512
5dc5cf9e06329073937c43486c4c3e25068a96e0b0fe82f3416d820172541f252f934754f47e0223478bcd92db94ec4ae3ed63e11082c98d54e92200ae98d828
SSDEEP
1536:/xLK2OReR3CHGrk7OnCDIGYe3uYXVyOJoROyLi8gfCUnV4vNfz:ZVOReRyHGrkPDIvyqOumbaUqvpz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb23b5639aba146b038899aa87c72ad0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE