CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d067e04afb49dfec2350c1e9f11898c8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
d067e04afb49dfec2350c1e9f11898c8_JaffaCakes118
Size
99KB
MD5
d067e04afb49dfec2350c1e9f11898c8
SHA1
8ba29a146c31f6b7f56eeb60730bcd0443c858e0
SHA256
9faf4d9a4227a78ead10b17665ae13075cc9bcffbc214656d8515d72da710e58
SHA512
94a12ee797eca720fc4726a9bf7ef9ea94d21ad9701d2bbaa089b1c07cef0a7d320a9b5f1a6afc261e87d94016a6486ff7d8d8ad101a40bf2bf4a126ce3c4978
SSDEEP
1536:7rOUbmJ/ZS8DDfS/hQloM39ieg8YLYrEgjxmvM52:FbmhoODfChQlob8MujxmU52
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d067e04afb49dfec2350c1e9f11898c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE