CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c0b923198182a0948b99e9a8b8ad18c0_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c0b923198182a0948b99e9a8b8ad18c0_JaffaCakes118
Size
95KB
MD5
c0b923198182a0948b99e9a8b8ad18c0
SHA1
32311bf2596de5e909ab552ddfbfd4e98a479f8f
SHA256
3a2d59728a5a5aa591f8c63487358b2f3d8571ca6179dc59bbafbe072c4c689b
SHA512
b424639c96fcd9d88a422d81c046580645c1dd717d98b0d25edfd6fdb7edc272f44b5ec2e6671d661f9cb8fd6f70c4793296798f3d0c7fb23ec21fc325e3e2d1
SSDEEP
1536:SQclh8MIwu5+oYTk5SCgPd1yi6SCcQiXTBXkC2xpB4eZjbTuBw:ahdIw/oYT91yi6SCcQiXTBXkCIB4epbZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0b923198182a0948b99e9a8b8ad18c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE