CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa751cc0fdd16d26790c020b871d2c79_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fa751cc0fdd16d26790c020b871d2c79_JaffaCakes118
Size
100KB
MD5
fa751cc0fdd16d26790c020b871d2c79
SHA1
dac358650a5b566fa26f059480c636babb3e09f9
SHA256
d156241686a97c5cebad9438caa190f6980cce5ecbf477fb724b1e58ddbcb572
SHA512
a83133b154d0468f75aed907291411265c04f182b1f012536a1d53fe31219c9a3be6515b032b29aaabae8ec5c5879326efeed0276ab3531addd4de62c61839d0
SSDEEP
1536:9iJJJXbJlTYTnkU3hOoBgn4R87uQQ8OFJIlSRRTOgTq4Y5dvJ:cJvpYTnkU3ko6n4MuQDoJIYzqf3J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa751cc0fdd16d26790c020b871d2c79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE