CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d9be74ce095f4e811bc51c92171a8da5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d9be74ce095f4e811bc51c92171a8da5_JaffaCakes118
Size
90KB
MD5
d9be74ce095f4e811bc51c92171a8da5
SHA1
75152756356b5866ee69c5314ff181e4eb2f413a
SHA256
60cbb6b46954f5c125ba6f66f49c599bbff17115274ebf944bbf1e6ab20d13fe
SHA512
e6d177b52fdbe931ad9c4a5c37431b13d2513e9d6e73a0d35ae66dbc7d3a741bcffa42e35fb6fe6c961d7cb1bb47d3283f1ff650da4aa29c10ac7629d9ae8254
SSDEEP
1536:INWujxA5EY8fwKVR+ptuqjw0/qUiqwdkb2aTlNB1:x/2Y84Cw7UHU2dkiq1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d9be74ce095f4e811bc51c92171a8da5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE