CancelDll
LoadDll
Behavioral task
behavioral1
Sample
db64be027e53a992b3cd871f5a033a13_JaffaCakes118.dll
Resource
win7-20240903-en
Target
db64be027e53a992b3cd871f5a033a13_JaffaCakes118
Size
113KB
MD5
db64be027e53a992b3cd871f5a033a13
SHA1
c27969344e9321e6e8fdb752d87f8658d28322d7
SHA256
de478c874f12a7632f530747ea840d50322830c00a582c4c4440c13266f71ecc
SHA512
12420e59d651ce06a5f18e0d2a76e5ba2ab4b8fd31732f763ff864c981b581ad5665fb55598cefb9da3fd66f5fd6717005ab5ddae7ef083e0adf4e049fd6ee7a
SSDEEP
1536:heJckZaGRzCuu/6XnhBbgA6UFFC0BG+ZkJGVoM8lzvqdzLK/C1b/:gJvs2A6Xh/FA+Z0G8L8xl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
db64be027e53a992b3cd871f5a033a13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE