CancelDll
LoadDll
Behavioral task
behavioral1
Sample
70413d16815a508af984f2cee762628a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
70413d16815a508af984f2cee762628a_JaffaCakes118
Size
2.1MB
MD5
70413d16815a508af984f2cee762628a
SHA1
0b9160e1870141e064da22bf4a1451461d1e5310
SHA256
6c916fd78ebe7c2e7dfe948514240d9e99545b63ea67202f92417782f685f46f
SHA512
b176b2826dd40fbb337060923ee1350785193fcf14631b9f9bd40b47dddf6f1075347ec3c54ab6958e556c3b26fea96b8f8f0a35f90cfafc6613a667ecf57238
SSDEEP
3072:Wvrhwea2T+leLvHkUCm16E2voDUmLmvR1VQ:WvryX2TDv7Cm161oDvADO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
70413d16815a508af984f2cee762628a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE