CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c1daf9339a8d9af7a55a6c43945a65a3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c1daf9339a8d9af7a55a6c43945a65a3_JaffaCakes118
Size
89KB
MD5
c1daf9339a8d9af7a55a6c43945a65a3
SHA1
658941fea44057389c35e7d27695b359453dace5
SHA256
79a26399b1a33fc0440e5919c136231094ba596544058a52ffc562cf76786b37
SHA512
a4a9d7e6036fbe9d2ae2ddf9eafbd945328e2d71eda0bf0e9a81d007b91aa4989f55ddcde363a7fb15c63e631f7793e791c133c35e31dbf6b9bbb2fe05d12db8
SSDEEP
1536:QPHd2owFn+G5mAGHnWauA0oHZ0N96TpK8z3Uv7DP01suvubIr:QP9hwdmPnWVo5036TbjUv7DP01vvL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c1daf9339a8d9af7a55a6c43945a65a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE