CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5bf3b6f095f36315ff46d9c45339daa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d5bf3b6f095f36315ff46d9c45339daa_JaffaCakes118
Size
111KB
MD5
d5bf3b6f095f36315ff46d9c45339daa
SHA1
d02cc736dcd87846be80dd2119b4c9e36ffbd726
SHA256
098c8f3b69f67ae19758f4f4962e4bb10645e4e45d31ec1abbc75e3e7642252c
SHA512
a0eb834786add7a2da89baf90ca9af32ee4210a88621ef74dd21b1a18d8af29a075c7248955de87cc3c01fcaabcaaaf0e015d39ed568598e459b2cac1f6ca483
SSDEEP
1536:RzL079679winBLaqQNroKvNvMWPECtjAqzYr0j71819x+zrergp:RLm9679VZQNVJEIEi7e+zr7p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5bf3b6f095f36315ff46d9c45339daa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE