CancelDll
LoadDll
Behavioral task
behavioral1
Sample
da93504a64d0875ecbae6087d9fc7e1d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
da93504a64d0875ecbae6087d9fc7e1d_JaffaCakes118
Size
83KB
MD5
da93504a64d0875ecbae6087d9fc7e1d
SHA1
d810d03d274ff4565ab3c809744d154231f48a62
SHA256
b1bbaff2ee0c1b6a78304395a40404156d4ede14055412a01c5d102e0eb25730
SHA512
3a471ec3b8d88b36db65115d5e7ee8afc5261dd89e4df1e68878364737c7c4d784777ff607b5c320b87225b0f1c994d9d5c51e626ba074c76e467eb18f50dbe7
SSDEEP
1536:0SBGICmjXCTyBetAxZofp4xQBm3xNjcCESxtlChSKD5c:/BMmjXCoT2BixCSjlAxD5c
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da93504a64d0875ecbae6087d9fc7e1d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE