CancelDll
LoadDll
Behavioral task
behavioral1
Sample
555ccadc048cd4ae5466a11a719ff6bf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
555ccadc048cd4ae5466a11a719ff6bf_JaffaCakes118
Size
106KB
MD5
555ccadc048cd4ae5466a11a719ff6bf
SHA1
46c41973da049499c8f95d363f49ae4385869686
SHA256
d08c68a1191194c40269cf38ecbaa88254f1a07bf3599d129b9834c370493002
SHA512
00c3e13079a6cca2abb707ff6811d101892e4bd79e1a580dc5483822746b23aa116b568283d1d09077f0aaeb281cc1ccd05b5cb35cf5a319dfdfcf502fefcfab
SSDEEP
3072:0OtFNv/r7r0TxLjFvlBRZipZeQTl+gwL5UoAw:0Otbj7QZjFdsmfgQ59
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
555ccadc048cd4ae5466a11a719ff6bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE