CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e1761d1c4fb3396480d56bec967176d8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
e1761d1c4fb3396480d56bec967176d8_JaffaCakes118
Size
105KB
MD5
e1761d1c4fb3396480d56bec967176d8
SHA1
7b52aafb6d3e2d68414089a31bef9a7eb256a017
SHA256
ef9913188ce0dbe2ca976d503251ec8e2bdde26610a70d91bdb6dce784053179
SHA512
b77208c5cf9881aa26faf472fedb27df30cf096aae6d7f43f8df363aadaf7392e095bd4c914bff06c0c2eeb6f94c6fff84af1646381832b4dca92b4079dd0e41
SSDEEP
1536:DjMKODJPutB+69AmJ9otGNXZRiTzs2yjo31M1lg0nBj73IG3oExYdW:+MBpAm7JgToBjo3e1mEj7334E/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1761d1c4fb3396480d56bec967176d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE