CancelDll
LoadDll
Behavioral task
behavioral1
Sample
25d5c6588c7bb6f797725dfa1c47452a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
25d5c6588c7bb6f797725dfa1c47452a_JaffaCakes118
Size
99KB
MD5
25d5c6588c7bb6f797725dfa1c47452a
SHA1
21942a38006e0a65bc8e892c83da053af2c70bcb
SHA256
ffa5a37cbdcc140d075441d56080c1be863415b51a059a386844e7f5236c696c
SHA512
9f5400a7ab59374546ac78dd19d20a2f24bb58d1d671b5e493bacadb06842b3f555e73214c7fd9781d01f36bc795d69fd3b7ad3a0adf3ca4e4ecaec8112f0648
SSDEEP
3072:f2RWdNEp4Ls2gSxOQfF5T0vJRaUGne4XW:f2RWdNEqgYUYF5wv+UJ4G
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25d5c6588c7bb6f797725dfa1c47452a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE