CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f9abe76469d1c348d1f011479316b435_JaffaCakes118.dll
Resource
win7-20240729-en
Target
f9abe76469d1c348d1f011479316b435_JaffaCakes118
Size
101KB
MD5
f9abe76469d1c348d1f011479316b435
SHA1
b1b394ab67d17f4125d33947c7511a55b63d0345
SHA256
afad3e5dd2380f8b4e317c664ea3994b547a7e157637c252b8f7bf02f262e815
SHA512
7a216d51dc3b257f20981fe0932296979ada96fe2d5ff51bd756b926fd2175a00bc50e083e828d3466129bc2b0a6240c9151d460fd199eb3f1ab50b612f69e8f
SSDEEP
1536:aI9js9B05V54qko+hNQcYrPvoNZMh5/8+NaIkN38nPF1kXh0no:Xjs9B6AVo+hNQ92ZMh5ZPFiRj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f9abe76469d1c348d1f011479316b435_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE