CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c887100ca84979e5b8a782cd96fa1096_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c887100ca84979e5b8a782cd96fa1096_JaffaCakes118
Size
104KB
MD5
c887100ca84979e5b8a782cd96fa1096
SHA1
40c11143801e0a6cfec72a4317d846dd6f131e45
SHA256
6bf8923e192ad3e430aeb6ab47f9f601d3b40980b29781ec2982670036cfafd7
SHA512
16f7ba3f2bfe03fd8beab8a2ee0b9e02c8014e609c655dc5a2592d227fedb6e14d88d6dd083b2da743c950bfd9cef81d099760ea449532a89a4717a3ff2f000e
SSDEEP
3072:ARlNzx55pq8FLeSSrHrRvr8YiispFpOaanqgZo1:ARllx4KTSrHtzNnspFlQqgm1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c887100ca84979e5b8a782cd96fa1096_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE