CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5b9677f6cbf98883329a96652fd950d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
d5b9677f6cbf98883329a96652fd950d_JaffaCakes118
Size
98KB
MD5
d5b9677f6cbf98883329a96652fd950d
SHA1
158927179e3680591e86988931b4a34ebe1e88ad
SHA256
955c21f491d3d6c33956d054570c308f3ca919be9e7c3e0e5e1f780fc9b742a5
SHA512
cec3974c18e666699acc923e104decbd236d06df384cfaa11898c61d6d8061d00b6768e3430cb170778432698bb42162c2ff82fe254d93df1a20bc01c6503e24
SSDEEP
3072:0RBNXdAK87xbMdlnF2wFcRkdp4Lrs+ca+o+31vMbj:0RBBdBibMdP2wOLrs+1+oC1Ebj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5b9677f6cbf98883329a96652fd950d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE