CancelDll
LoadDll
Behavioral task
behavioral1
Sample
682fbbb76fdcea32c3fce67dc9d1cc38_JaffaCakes118.dll
Resource
win7-20240708-en
Target
682fbbb76fdcea32c3fce67dc9d1cc38_JaffaCakes118
Size
87KB
MD5
682fbbb76fdcea32c3fce67dc9d1cc38
SHA1
7553b6dd54e59eaae2afba71b30485b701a83db1
SHA256
fb5c86d00ae5084caeba2de90402307e204db0c8868a256d4377b4a9ace064f1
SHA512
706a943fda0e35399a0cde9014833ffc9d44fac361704a105ad563673d7f9970f8f70249450141e19481f21b05d4a52506147925a222ff3e5b0760d0fa1abd72
SSDEEP
1536:e8/mATyLDMEsXTzObToL0w25O1bHOOtLW/rPBwg2VWk0RpPGw611aXEm:YwgIEcOPvdobvLWjZF2VuRpOwu1aj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
682fbbb76fdcea32c3fce67dc9d1cc38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE