CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fc488281fb84798fc067b9a590055696_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fc488281fb84798fc067b9a590055696_JaffaCakes118
Size
103KB
MD5
fc488281fb84798fc067b9a590055696
SHA1
ddbc695eaeb4811e55f21c487d0ece5b08eff466
SHA256
9ff6faf449d62d7d63cfc2a2db2d80b4c92353f27291d87261ddfc23f098cc98
SHA512
eb2fef48075e80effab96279759c35692283e77d29b33b4f6e70f51c3c5dc2c7807073256566f5fb03ea1a75dffaf5b07b711d4c912c35f9f29296d2aca46733
SSDEEP
1536:0pstl9F0gv/r7r2Z36plvBPFRd9uKCsLvBnv8TBh3twWS:0OtFNv/r7r0cJ3n9uK1Bv8TBzPS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc488281fb84798fc067b9a590055696_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE