CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3cba116ef163c6cce43a48cdb7786c73_JaffaCakes118.dll
Resource
win7-20241010-en
Target
3cba116ef163c6cce43a48cdb7786c73_JaffaCakes118
Size
109KB
MD5
3cba116ef163c6cce43a48cdb7786c73
SHA1
a03dbe1c66c11fbb72841eecb10434efc2cadd2f
SHA256
11d4bc0fa5001151c7a5ca3333c8633b6d83a0684820194de82680cd07f621a5
SHA512
0e60cd15a3709b1f92634b202a8e4b09bc1e028fd5400eb9bc9082075fa658294586f427985d58f55dbcfd870a2d58768ed4734425c3d33da333c76b3da0c4fc
SSDEEP
3072:Zfi3b8enD3s122ISB0lSz5s8Z3wNijyUH+puV:Zfi3bZD3ubISB0gq8Z3wNXDA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3cba116ef163c6cce43a48cdb7786c73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE