CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fb644538b68fb5b76725b6347cc41896_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fb644538b68fb5b76725b6347cc41896_JaffaCakes118
Size
96KB
MD5
fb644538b68fb5b76725b6347cc41896
SHA1
743efa122be917b014d998303a7bbcdf40cef2d5
SHA256
ab41112119c267bb4421494c9bd5d8b3a9908a9751f59b1a7ff6036fd160c7ee
SHA512
6c37432eaba6319de2a51f501c17a75607143621e54054fcffac67792921f16ba54f4f0200daa86b4e58af7a6919d03d1c405ba6e4f8edfa45846cb59f14e9db
SSDEEP
3072:uRtNn1pU0S8XFFMsLFqJD0QhqJZsDYuxWhpYVbe8z:uRtp1+a+eFqJBhqJeDYuxWhuJek
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb644538b68fb5b76725b6347cc41896_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE