CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d29a6262e8858a704bbb4b7abddbdf65_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d29a6262e8858a704bbb4b7abddbdf65_JaffaCakes118
Size
96KB
MD5
d29a6262e8858a704bbb4b7abddbdf65
SHA1
709d61c7b7420da4b27dca3a363425121e754c76
SHA256
1d344189ef813bf490c1e679ab4f81463d53ca674c8d79f0663fc817320da4e6
SHA512
be26bd627a45b7bc827fdbc78935cf50b3d4c24285403e8c85a9dbd33b9bde7147635528f573055511905efb1ccde436054d9356aaf7a0b9ac316b44c42977c6
SSDEEP
1536:Zn4Mi33LS7enDxBjq+EpuW/toC1KMB2judJxo3Ugd:Zfi3b8enD35wu3gOjuCd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d29a6262e8858a704bbb4b7abddbdf65_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE