CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f57a836aec8c242b665be3ca2039ba6b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f57a836aec8c242b665be3ca2039ba6b_JaffaCakes118
Size
90KB
MD5
f57a836aec8c242b665be3ca2039ba6b
SHA1
99760ce8f514cbb3afa9fb26de2a0b24145e9e18
SHA256
5e015950fd0e79baf30693539688145052a89c2e78145ae1b28bb0a8877014b6
SHA512
38ae483b4b71ee1bc6ac85ee89e74e831499dacc941869237260bde46c2b6fe3eb436a82b4b205af6ee13111cc42215fd97d8b958b2375274c57715f71583994
SSDEEP
1536:0pstl9F0gv/r7r2Z2lNNsPTfpoe3jFRuX6P2+Gz:0OtFNv/r7r0YejPkd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f57a836aec8c242b665be3ca2039ba6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE