CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d37a41dd3cd78d5ca5aeedeaa3a33276_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d37a41dd3cd78d5ca5aeedeaa3a33276_JaffaCakes118
Size
92KB
MD5
d37a41dd3cd78d5ca5aeedeaa3a33276
SHA1
ae89a2a55c53c24d32926f8cea7d6f40fbff537f
SHA256
7839c9fe7b40e552e4e1d980571a34f2c48714f4312bf32feb6b67808b314766
SHA512
9785a43cd46750b0761786280e9f69bcf3e23f6aa29b81732341e909872f27e45b60563797cc3cc5b61e7b780883d85cfb228041a2fe9dc3fd713a77b93b2f05
SSDEEP
1536:J3iyDPFw2bprmj0J0rTbpJTYzQyI2kTuvcNS5u7U1oMDhvhJUe1UZT:1Tw2bpCoJ03bHcI2kIcNS5ugWGJPUZT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d37a41dd3cd78d5ca5aeedeaa3a33276_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE