CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be596b8e82bf731d692a29700ca2a2fa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
be596b8e82bf731d692a29700ca2a2fa_JaffaCakes118
Size
107KB
MD5
be596b8e82bf731d692a29700ca2a2fa
SHA1
cf0a6a665923a8dce3a43c005178194262192e7c
SHA256
8f32e2fed62446d5da8efaa917948808d9e55d7edfdeec66b8430528112f5317
SHA512
cb3735fd978107c77532af27ab4f1ee6bfae59ea1f1fcec10198bbc901a228ffaef80b22e26e007c7a1c8baab69a5634c6128a43b50e4f93b0390b40bee161ab
SSDEEP
3072:iEoHek1z7P7fEKLeXZzG/3hvVZxbIB+3AitOm:iEsekJP7fAX29DbIB+3Gm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be596b8e82bf731d692a29700ca2a2fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE