CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ff1f761e4e5d717bf4c40bcfd4f15d14_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ff1f761e4e5d717bf4c40bcfd4f15d14_JaffaCakes118
Size
101KB
MD5
ff1f761e4e5d717bf4c40bcfd4f15d14
SHA1
cd3547ad13eeb558924dd36b26f82054ee152011
SHA256
9c01ddabc52acc4b73144a9cc06cd3062179079ec458160e3e72bbe5ca39fff4
SHA512
779069b7772399f1a98b6945087ea414d09dcfd89ea98a1b8cd147a9944fa015b55d05fb7f169dd1f2622963763f3a8d34938598f1f60a366d1bb52818c44e67
SSDEEP
1536:LmSQNbJE1vj8gDxkOpmFIwsEA2y0pmyUDVKmui7Vbv:LmFty1L8gDyOpLwY2De3t
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff1f761e4e5d717bf4c40bcfd4f15d14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE