CancelDll
LoadDll
Behavioral task
behavioral1
Sample
69cfa3bde362a553140cb1c91febd3c6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
69cfa3bde362a553140cb1c91febd3c6_JaffaCakes118
Size
138KB
MD5
69cfa3bde362a553140cb1c91febd3c6
SHA1
a2147b7976d4b887d639a2c369687ad222e0b963
SHA256
29db37a3d7ae35f7c06319dd850b2223b255f853325099de923aa133c6ca3af7
SHA512
a292d375b4f3d1866e01a23c732c2cd7b449894358cc3a2c349b80ac3f96ce9f4c070d9e5e6fc4f2c734169322d1de1bc1315583b3790400fcbd6827350bf2ed
SSDEEP
1536:MDEFUawhF/H8fOhIdNNNvf4xiFyDhTK8ACWrvXqy7ynnR94D2:j4D/c79v9FyDGzrX7cnsS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69cfa3bde362a553140cb1c91febd3c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE