CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dc2fba2f09c0aefb338f66077a1fd2e7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dc2fba2f09c0aefb338f66077a1fd2e7_JaffaCakes118
Size
103KB
MD5
dc2fba2f09c0aefb338f66077a1fd2e7
SHA1
3759554b4f4b29e7a610d426e5525e6092d97ed8
SHA256
989a2765a1d389c626553febc2425bb66e2a08168642c63f7af0bceb1d0f05b7
SHA512
4b122bd1d173f2ca40b9ef1dc4b8d24f7798d917c272c3153bce23b0295aae526db7464d1d4569b5398528e6094ba14e0892704afca1ff6e2b42ca9c895bb27c
SSDEEP
1536:xNWujxA5EY8DwKtCmjk/nESCwfhjCnFLrHX/lRNYn3CtRA3WjzCvT:u/2Y80yCmjk/EHNRE3aRA3WfCb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dc2fba2f09c0aefb338f66077a1fd2e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE