CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d15f783981d2f041475caa575bf9ce91_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d15f783981d2f041475caa575bf9ce91_JaffaCakes118
Size
111KB
MD5
d15f783981d2f041475caa575bf9ce91
SHA1
29618d465ecb36511115b6390fcb13fc3a69d741
SHA256
5a3b5c7d6b3623b29c7f0a7817e1e5f21f9e5f044377358201dec566c4a6eedf
SHA512
d6b0bef9ef07d8ca8f4aa0d297da300edb798e26b2e42ae51e682d6b945261b34dbda29c34fc8abb280af6b942e3afc6b19849b093dc09f1f22de9ff5f97aa16
SSDEEP
1536:INWujxA5EY8fwKVOFMWDkM2NU4y2pqzCqHj0oAsrtvySooDf7QFC2+Rn/z:x/2Y84CObDkMmUksbHDAsNyJoDcUF/z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d15f783981d2f041475caa575bf9ce91_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE