CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6822801a77d68b582c031af38d0231b4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6822801a77d68b582c031af38d0231b4_JaffaCakes118
Size
120KB
MD5
6822801a77d68b582c031af38d0231b4
SHA1
e2afa495411eef497b0cb313e0a9c29bf8cd2dff
SHA256
74718f06b9465d5ce8bd30bfc92cf214f6507337aef05b2247fff38b5e4b0d1b
SHA512
f44521f5e073cd46633eb890ec1d6ebb6ef90b2b14ab40543c4300958025d9d9d03e72f58ca01225330877fcc692e10d94571398c4549bee7ec87efe6a2f6b78
SSDEEP
3072:6SFMDgVswFLdNenHxknQov5BUAiyeusxv60zKo+XZ:6SFMDgVs6BNCxkQoIA/eErp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6822801a77d68b582c031af38d0231b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE