CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be20bd7c5a47b9a9ebc2423d49b5e6cc_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be20bd7c5a47b9a9ebc2423d49b5e6cc_JaffaCakes118
Size
85KB
MD5
be20bd7c5a47b9a9ebc2423d49b5e6cc
SHA1
39225b7fd945a5954a8dc4daf61a7f46116426ce
SHA256
4d02c13b7af42d6a21ec6d287a2967e383f912e59d458ea577b773edb3adf140
SHA512
931a14593e9454511bbba522a98fd740bd5394526b5e5da93f510e62e1bf073ffe793e1e5420b22b1f1c527f9ae65a1e13e35be90a8522cf7695bebe64d4bf5b
SSDEEP
1536:TD6K271gp7DXHQ49ARijkYDrX8F1xchmOPdp/C6w3fwJpmJ:TDGYLwwWiIcXy1OmGHC6wPIpO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be20bd7c5a47b9a9ebc2423d49b5e6cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE