CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be760579e851a4a25135682505bed5ea_JaffaCakes118.dll
Resource
win7-20240708-en
Target
be760579e851a4a25135682505bed5ea_JaffaCakes118
Size
6.4MB
MD5
be760579e851a4a25135682505bed5ea
SHA1
f9edf82bede0e1a9e0377a9f173db7685c4b5a19
SHA256
7bf75089983e6396c65fe2e1f762913092b9c21886781c7d5d5053aa5290921a
SHA512
7e795a4e7ae2cd63d912d601ec546ceef1bbf70e5c54ed11903e112fd8af59b658d0c5720ceb9103ead9ca404226356e997d20c0dd4c135012a88467eb725476
SSDEEP
3072:UUY79txNTvYr13R4JZVkFw71XbJ7i9Z6MYc:Ur9ZYrD4/VYwhXbpivyc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be760579e851a4a25135682505bed5ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE