CancelDll
LoadDll
Behavioral task
behavioral1
Sample
41edd862808d322846b4acec2fae2855_JaffaCakes118.dll
Resource
win7-20240903-en
Target
41edd862808d322846b4acec2fae2855_JaffaCakes118
Size
122KB
MD5
41edd862808d322846b4acec2fae2855
SHA1
b05fde379bec2cbfc37122c3f92c489329194542
SHA256
fab28116529e57aeabd04e34388b962457cbf7db97cccf4ed4c1a0819118080a
SHA512
7c3f465a838e794780fd7c6dcb52aac5ad8dc83f8ae266c39d7d614aebeb0170e3f316798d0c70673f16bb9a320a908b7c951549551f80d5100f52ce319c44c0
SSDEEP
1536:/ePxCUjeSp7qrnhBbgA6U7eLKeSlJdnq4K6dNbvsG/MjJt5IN1O9AP2+gFkhQcWe:WPxpuLhl6PeTnq4K6dBs1IN1GnIWFLQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41edd862808d322846b4acec2fae2855_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE