CancelDll
LoadDll
Behavioral task
behavioral1
Sample
715f6fee398126cc2dd17505adb55816_JaffaCakes118.dll
Resource
win7-20240704-en
Target
715f6fee398126cc2dd17505adb55816_JaffaCakes118
Size
112KB
MD5
715f6fee398126cc2dd17505adb55816
SHA1
3e6abebdfac77ac12317d837bc8f01fcf5a181fd
SHA256
7a91f03dd21ff11007b2b6d7bf4135bb3a18d10562b5359e3dcbd4450e79ff68
SHA512
29bc3c4d72e596fa8b5b0f71af3a4d6c5689601c87d957105f3d87d055a6cf37e11aea05b1d3ffdfe44964808dcaa6a704d1a3d28b3b47cf689b6338a23698bd
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJq7Y6Z5jGkwThjDjl/aADIg6PNAcRrl3xtw:l9L1xm6hpbVccctzwV3jl101iG5o
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
715f6fee398126cc2dd17505adb55816_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE