CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be4800ee44bb5c7a66e318c8101f3bdc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
be4800ee44bb5c7a66e318c8101f3bdc_JaffaCakes118
Size
95KB
MD5
be4800ee44bb5c7a66e318c8101f3bdc
SHA1
70b965bc01333255b3f805ee820a978d478c3224
SHA256
72c9d8f79b28cb6c06bae3c4b3c27fdf32d55987e77167c54d4e9943928d8dfd
SHA512
5ebc5317916806985d10a6b60647bf1840e01da615f6e8cf9dc75ed6c5bdfe369434708409c67200b0ca23f6cbcc403bf14747b51457bafdd10e26cb709e4eeb
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8Yxex8zIUcxKVCXL6VNJ9yos1ug1YN0iWmjOH:FfUxhDtZp8vIdCFYxe+IUMKk76VNqb4m
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be4800ee44bb5c7a66e318c8101f3bdc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE