CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d14b12f0f3c158c18001d37f606c831d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d14b12f0f3c158c18001d37f606c831d_JaffaCakes118
Size
87KB
MD5
d14b12f0f3c158c18001d37f606c831d
SHA1
b8fa7db272a2549502ab73d8007623ff5f814a3c
SHA256
d466360ebb7c60e64208017ce2f88c4881b31954143058475035eb3a635d54b7
SHA512
9671bd1979bf81089ac0bd5b2f8f170912e3a483d8f0d22fbf7a0b5f5fd19e2d9c53bae69cb5b9f9b3b73ca71736fdf9df029bfcd9573c45dc796b572cf115b3
SSDEEP
1536:kFjbtlR0g+MVpqz3tIJXjYe5/+pHQYYxj+DcJC:k1plR0g+MVpqjOFrdnnjgMC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d14b12f0f3c158c18001d37f606c831d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE