CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d4a18f5267db9538916378cfdbedf121_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d4a18f5267db9538916378cfdbedf121_JaffaCakes118
Size
107KB
MD5
d4a18f5267db9538916378cfdbedf121
SHA1
6a4006fc5f06eed300a8c5b59aaf720543cde589
SHA256
71065aa92d7e634c1dc329145050289b7a93161e9a0887678f3c8c4727dbb9c1
SHA512
1a118ce385534c79ce9a09b403be1bbb61f080a32b6c0d24386f86b868daeb1df1cd613b9057d29324d131f9b96a90d665cdf581dbb0af25e521816f7e75109f
SSDEEP
1536:7rOUbmJ/ZS8DDfiNo2wmBmNu0Gk/906RZnTGlVtlU9s4UfwZk0:FbmhoODfiNo2hmZ066ZlU9NUfib
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d4a18f5267db9538916378cfdbedf121_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE