CancelDll
LoadDll
Behavioral task
behavioral1
Sample
da9a5c8c99d1d6685196351849dd6d35_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da9a5c8c99d1d6685196351849dd6d35_JaffaCakes118
Size
79KB
MD5
da9a5c8c99d1d6685196351849dd6d35
SHA1
12ca9743767761288263aeef0bf3f021ae98ceaf
SHA256
936718b71b69f5fa98b8679902f3c0676d54bec2f8a81ecc750c53c81f5bf158
SHA512
6f8fcdc12f8945806e36e2e0103ecaa7c2dca5f4720fa5325311469a5732c508aca247725856fe757391a952350facd1cfa9f74e17b5570027783731cb7c613a
SSDEEP
1536:ARlNzx55thtq8FLeuF2XI3hXckglNE2BQvlY:ARlNzx55pq8FLeuF2XIJ5gU2SW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da9a5c8c99d1d6685196351849dd6d35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE