CancelDll
LoadDll
Behavioral task
behavioral1
Sample
53bf8ff7d385ab97a3eeb09789d54538_JaffaCakes118.dll
Resource
win7-20240903-en
Target
53bf8ff7d385ab97a3eeb09789d54538_JaffaCakes118
Size
118KB
MD5
53bf8ff7d385ab97a3eeb09789d54538
SHA1
7f205996a1fb5e8bfbab61d7856a385f1d707f32
SHA256
d5ba6a2df69f8d5ef48d16a7b0519e85c272790a2fc79919a61c75b8773a71b2
SHA512
1c81b43ccd2cc52333a86fe38da3a7122459f3e67c127eee6222eb8cab624784f2e2c3347c38d833236b5085615995dcad25329b327b14e5cd14b9583cf99d35
SSDEEP
1536:6Rw9k6k1FrHc5JTzN7ipWcI46GUilLW3RdI:/cHr8rTgw4hUiO0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
53bf8ff7d385ab97a3eeb09789d54538_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE