CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fd48aaa8b1f274ee12055b1833414fb8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fd48aaa8b1f274ee12055b1833414fb8_JaffaCakes118
Size
111KB
MD5
fd48aaa8b1f274ee12055b1833414fb8
SHA1
b40cb0be5722f8571f970bf77087adc4433ca7dd
SHA256
3ece00a9a9304d50b631c48ac7adf5c73301319ac95e55a6f8b8f3915ee4ee2b
SHA512
879260661589d0c2f17c187af250e736f6c8af31b7fd025e5aed9649f73435578c681f6e6edabb19bbc3f2e8c94319e30ffa14de115157d43690cfe7a99c7721
SSDEEP
3072:TDGYLww4HEohgi9Rund5kVlp7D2O4qInhh:nww4HGiH+kVlB2O4qC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd48aaa8b1f274ee12055b1833414fb8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE