CancelDll
LoadDll
Behavioral task
behavioral1
Sample
15814aa84b8273919fd43b2a3f063a1d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
15814aa84b8273919fd43b2a3f063a1d_JaffaCakes118
Size
94KB
MD5
15814aa84b8273919fd43b2a3f063a1d
SHA1
01cb6b2da8785d87422929de83426f2289134e2d
SHA256
876e8c3e4f1f15c8dc68256b97263f1fb6165d6b06d4a5e3af6308f7c90db3c8
SHA512
03f6ff8e7ba2a199ee81571cdd59012ce9ad772d5e46b09da01c5296961f6cda85e1128f671385146e4705491668248ad332759e874a4c0d7fa5d6cbe950adca
SSDEEP
1536:SAVJ0mWeB/iU9aHpabEJ1Omr6Lym+QTBaH7C0mjGp3BLeoCIRWx:zJ0mW8/irHpfTOG6GKpjGp3BLeZGG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15814aa84b8273919fd43b2a3f063a1d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE