CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c8072a029149ebf58e98a437bd1e8d62_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c8072a029149ebf58e98a437bd1e8d62_JaffaCakes118
Size
86KB
MD5
c8072a029149ebf58e98a437bd1e8d62
SHA1
9cf32c804d7e755c4eb5272318d913b6c1f1e8d4
SHA256
5775ce698de8deee23c857299dab9c7673d2301663b3888556a2155db5ea38e3
SHA512
7b431d54b2bf298b2f7873c0496ef83ff220543f2279abdaaa3cdbb907bb77d135f37fd279ebd3ac465004d98b8fa19e61362dd77b29abe53531d8f7b351e1bb
SSDEEP
1536:i64W3b/+sHTUxLuigmWuUPXnx1ObDL9fbgbGwRy87QJMvaK2/o:1b/+sH65snx1qDLdbgiwRJCKB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c8072a029149ebf58e98a437bd1e8d62_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE