CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bb93817a85dc0350c3d4b1a8b48a9006_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bb93817a85dc0350c3d4b1a8b48a9006_JaffaCakes118
Size
4.1MB
MD5
bb93817a85dc0350c3d4b1a8b48a9006
SHA1
e5f7f3596cfce69fc6107bc3fa62f503c24cb91b
SHA256
aefb39f2cf2969d80d594248a67f1584035c0de859ce8f08f2b3d77ce682d32e
SHA512
cd4d9f052b2f45db577dcc4ba83dfdb3d6890ef36cb3ddcb322ae2019b1e0adea8fee5863f95378c85411020e60641e3256b2d0962ed7f757f9c969914d6965c
SSDEEP
1536:w2owFRZBLWz+M47QvqBxBAP9bDXoyTWAuSZUv04hJRoYToUT9s:whw/3LS+ivqnBAP9/9T6US0uJ3T2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb93817a85dc0350c3d4b1a8b48a9006_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE