CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0de221b2ad808e9070471a97fcf08d03_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0de221b2ad808e9070471a97fcf08d03_JaffaCakes118
Size
98KB
MD5
0de221b2ad808e9070471a97fcf08d03
SHA1
3402c309f35ff56e9fe3605032f09c3d158834ba
SHA256
7912aedc400d892cd55d54d36201419ad805dc9dc1298081a0e3e54bcf8ca027
SHA512
0662c618ef12794f649c9c6cfb4d05bd1eac8b0231170508beb3be192151a59fe20614f5cceebf0f75e71363c6ff8cea0d83792be03f4296715de35ddbcb5152
SSDEEP
1536:OoKR1YFY/H4SXxyBvaolCZisl2MqKL6pF+8HvKPQd:+1YZSByxaolCk62QLIF+8Pld
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0de221b2ad808e9070471a97fcf08d03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE