CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f508c453610a33384aed197290c424c7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f508c453610a33384aed197290c424c7_JaffaCakes118
Size
88KB
MD5
f508c453610a33384aed197290c424c7
SHA1
63025e0557682e3b3e1401991423557f84de3662
SHA256
e22ca70d1507b2c3993832e087be896be603ccc5e49dade574a8c286280c9fe5
SHA512
ea5431a2d27b7202fd6a7b773161bcc814610715177deb4501ccdfd2ed58f835e95f43d0176bd078c394553c13b8b2bc2a146b4095eacce8e7707ff2ef1a0d72
SSDEEP
1536:TD6K271gp7DXHQ49AgbHdtlmmnW1vjBD+13o5:TDGYLwwPYvjBD+13C
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f508c453610a33384aed197290c424c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE