CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6c60a04e15a878c03b9b1195b6c2634_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6c60a04e15a878c03b9b1195b6c2634_JaffaCakes118
Size
117KB
MD5
f6c60a04e15a878c03b9b1195b6c2634
SHA1
7ebec1003a1059d8576a74fc1f29b71378c117c1
SHA256
7971862b955cb8f8e208dd2081d58d49b74df97a662bf635e11ab07f837f0467
SHA512
26c03328d4c658bca252c1f36e793a07a4c24c4a181840aa1c4b20221151badfe7a9b727f68ac13f648f65de904f43c51dc0b5c2de931722de9a3685189d6969
SSDEEP
3072:l9L1xm6hpbVcWhdPcQ4C9eYjKVpzyUhE8m:hnhppz/PcQDU5GL8m
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6c60a04e15a878c03b9b1195b6c2634_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE