CancelDll
LoadDll
Behavioral task
behavioral1
Sample
680039de8f7d1fc8230362fb30d8061b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
680039de8f7d1fc8230362fb30d8061b_JaffaCakes118
Size
95KB
MD5
680039de8f7d1fc8230362fb30d8061b
SHA1
2e25673de7bbccfbf81c56d236963c7de7d5dbd2
SHA256
008a1a90f935e71e3284eebfd31305a9caa0c8cc7196d9a715f8470b117dd38c
SHA512
d8cb4cf0ac82b4bd5fab51871107df6136b09a96a559e112db2660103db7245ca166baeac65d4511e122fc5a6a3c0277c24c5c900779e66d53f121b769ab54d3
SSDEEP
1536:2moLIIWdNE9jv4LsBgIpCbHRkZfkHV1W4O7KLLHm9q7Na7vd7C+xeYbbXND:f2RWdNEp4Ls2oC94k11W4UKLLH2qRaRv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
680039de8f7d1fc8230362fb30d8061b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE