CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cfff14217892da22b1ec14bc499f67a1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cfff14217892da22b1ec14bc499f67a1_JaffaCakes118
Size
144KB
MD5
cfff14217892da22b1ec14bc499f67a1
SHA1
1de050b93e24962a10bda4da765f134cdfd6849d
SHA256
1f1dbf371fb157b1fc03aa3e8e9ec746d63b005b300a1900a0258eed1fb13fc3
SHA512
e2c5877fbfb0460e9853239a6144c2c493c1fa707d9a33421f7bbf9237183b1439733b45e5174e8db791a7a7f7dc91adecd4ffceef7f1f212848ec84a92f2723
SSDEEP
1536:pUEkUaLBLNH8DXG7xAuAfk9vCp3JdbC1C6U8YIxW1YuGmoW5d2r:DExNcCWWK3JJCkXMxW1wm55d2r
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cfff14217892da22b1ec14bc499f67a1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE