CancelDll
LoadDll
Behavioral task
behavioral1
Sample
716421a41ab8b468588cb64f8b97909e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
716421a41ab8b468588cb64f8b97909e_JaffaCakes118
Size
126KB
MD5
716421a41ab8b468588cb64f8b97909e
SHA1
03a6291fdac9e8a9f7cbca1bab893e7b6fa94ad3
SHA256
94bc65131a358e1b239092a5fe9f2c3f29394c60adfb4bf471569dd5d48a0624
SHA512
1f725fd7701f72c94d85ac837e56a06b5413679aeef6619c065ccf9457c579091647c06a882423cf5be75dd910d030e6ae571fb5f7293b26166888d07929e04c
SSDEEP
1536:IJrxM1wLW8DYcHcNRlzeu2zf85wKbTzdOMXq4Zpg7x0kQ+SR+zKTorEJE21G:Ixm8DYqcHmfGwjMaqpeDyRccowJt1G
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
716421a41ab8b468588cb64f8b97909e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE