CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cffedd742d503473dec93a6474aef540_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cffedd742d503473dec93a6474aef540_JaffaCakes118
Size
96KB
MD5
cffedd742d503473dec93a6474aef540
SHA1
a6ddcdd76d95b353b15c17156d47b58c43519fcb
SHA256
ad415e5b3a47af35fcc0c717c1ed32ac8f41047d4173241798f62eea4553417f
SHA512
128304e6aede273685003a036b86108972eca9f8b84a9f582cffbbb81032368e55760a8fc4bf81d896432251f3cafa1e52d4a2031de9cb0a230f6d6a4b03552d
SSDEEP
1536:i64W3b/+sHTUxLu+XN3pJojl0meglYjrq4SvuqgGlVZv4YO:1b/+sHKN3pJojl1e2Yfq4SmGlbwT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cffedd742d503473dec93a6474aef540_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE