CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bf5790316019ba7caefad777208fe652_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bf5790316019ba7caefad777208fe652_JaffaCakes118
Size
101KB
MD5
bf5790316019ba7caefad777208fe652
SHA1
81c0e5adb11fae2c96b38a21d67a013e12267d51
SHA256
fb872ae7a5aa285ae548f801211ac8cd888fbf4248567247ee020b6261099254
SHA512
3bb18df694bef20269b15fcc0fd6651b53658a1298f695298ae206b15c45e36d27284707294cd0cead1be77feb92ef581747035d23c1a08c93b0de12fcddda80
SSDEEP
3072:k1plR0g+MkUzMofA6nPg+ZhOBeE29OCZtM:232g+0zMAAwbhOBeE2HZtM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf5790316019ba7caefad777208fe652_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE