CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bc6c72e9365c2070ef4698ee01e30d60_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc6c72e9365c2070ef4698ee01e30d60_JaffaCakes118
Size
97KB
MD5
bc6c72e9365c2070ef4698ee01e30d60
SHA1
4cf6f1e6267cc6f6b45840ed6b201c5efcad586c
SHA256
b739b167df2b1062f8bfaaf2c88e9160f1fd9b2d7a417e0c238d47a089a8da1d
SHA512
8d43350654be44250b1966f864d8acc59a45717783ffb23453058e2b02f3df6b0bb05effec178857580930ee3b0554e7f5accf5ad6a730db684e7d74e7aff555
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqaYGZjGl57DVZR8z5erXvwUKaMA:l9L1xm6hpbVcsAxDja6X4lrA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc6c72e9365c2070ef4698ee01e30d60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE