CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa53a6616c52b6a13a382ed51054e197_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fa53a6616c52b6a13a382ed51054e197_JaffaCakes118
Size
101KB
MD5
fa53a6616c52b6a13a382ed51054e197
SHA1
6b1b7b2e8d762c5eb518ec685a46f4e079b43010
SHA256
f44e33eb4e002a4e8830a2a67aabafb01c5dffe770a6c45eb257803cce691b38
SHA512
824813f785ed5af9499e4ddc1c8233a94ebdb10d7a19de8ddfade0a3af4eed6cf8a7ab442948726d2e131138c5c036b3b568f77361625256c1272a32c8e9ecc9
SSDEEP
1536:OVcGVEtjXCET3Z0JvcNeNiELDPZm1/RnTjxmBOrWa7LuYlL:Wc1jXTTp0lcXEpmZx3eOSaXdt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa53a6616c52b6a13a382ed51054e197_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE