CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c11794822f5be37035714c35aca59486_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c11794822f5be37035714c35aca59486_JaffaCakes118
Size
98KB
MD5
c11794822f5be37035714c35aca59486
SHA1
45677d5468c599c950616d78b2b622a43074329a
SHA256
ab72956fc295569e0cd9b06727ecbe68ef956c8cd05bd61d5148158caf06eb77
SHA512
0e8c1410de370ddbdd5c4b4d9a7455f9e9e707e412f9e4a021d2dc90bfdf54346776101b2f22e8ee55d1cf7243ad42192b8f93be609ee6ee62e78c13270fab9c
SSDEEP
3072:FfUxhDtZp8vIdCFvT2Hgtmxtmkmq2sM+58ggq:FfghRT0IdCFpmzmk3VM+5Dn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c11794822f5be37035714c35aca59486_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE