CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be4f34a8b683b9b91839f85a17f179c5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
be4f34a8b683b9b91839f85a17f179c5_JaffaCakes118
Size
105KB
MD5
be4f34a8b683b9b91839f85a17f179c5
SHA1
113779ca1152b47418befc4988b5e58b120935ea
SHA256
38fc7c9894eb13b6a4281690b25c1bf909ddb94fd484e1b13bb4dd71c38282ae
SHA512
226216d1aa6b50af0d22233f7d7c611be9ffd323d04f6b729f8a2735b8338d751ea87242f217245c5bca492a1ec825ecc97a2c813d3426b3d01078678631fcaa
SSDEEP
1536:7rOUbmJ/ZS8DDfIXLXhhi3zibI2uSb7gdyTFHxJr01Jb9u7OXFyZKOyTjac:FbmhoODfIHi3zYI29MdJ/bCOXFzbjac
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be4f34a8b683b9b91839f85a17f179c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE