CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d154b3f4fb4338f6929f5c0603872b98_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d154b3f4fb4338f6929f5c0603872b98_JaffaCakes118
Size
6.4MB
MD5
d154b3f4fb4338f6929f5c0603872b98
SHA1
7a3a1064194f28d60508c8c5225f5f64ffdc5301
SHA256
baccc7c45514d6302ae18b4a38739918f158d05fa03ba319940d923dd2d164d2
SHA512
60f27fec01411c7cb62152583c9426dd0ccfaa81aeaa9b85e8c568791058baefdb8d227f97514e21531e8dd0f1af5316f360652c5b745aeb996650169e8b4b30
SSDEEP
1536:DAPLmf+QNHKpoynfXqdKjKBVMt7ONkFi96Gm6JyC7vXoK/pYNPro6F/:sPLWZNHKpRadnV6ON4i9Q6J17QK/m861
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d154b3f4fb4338f6929f5c0603872b98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE