CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ffa4f6f7ddd5cb4fe3d70f532949d47e_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ffa4f6f7ddd5cb4fe3d70f532949d47e_JaffaCakes118
Size
93KB
MD5
ffa4f6f7ddd5cb4fe3d70f532949d47e
SHA1
4bf274f86c4226778a9921fae2bba13bbbda99da
SHA256
647a352d8de3970580ac2560c4aceffa5cfbf555e184ff5dda88a995a4271460
SHA512
03f6d8a2a39b41aac63e802cd7d7f42a36c1e600736b97307574590ef0ba00ff5b8a0cf8d37fc6adb33829606b0eeedd887c39d4a8960d0a7591ad935f924857
SSDEEP
1536:/xLK2OReR3CH+JD+AxJzUNYMXx3/dieRISGbU6hIeICn:ZVOReRyH+JyMSNxx3VCFbxhQCn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ffa4f6f7ddd5cb4fe3d70f532949d47e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE