CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7120c2369da51c645543c9882477f628_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7120c2369da51c645543c9882477f628_JaffaCakes118
Size
141KB
MD5
7120c2369da51c645543c9882477f628
SHA1
c2736a290121b00ffcef1f60b7e69d584af2a635
SHA256
a04605d6ac1ac3386c74f0c2bdd9c954abc1208784272210350826b2d452f01b
SHA512
c06a3c05716c14e9e53ef0aafed9f8ca5647ae30dfa6b8c29cd34d25f99e3e8175cb616148950ddd43a3992cfe90ad894b396058ccb82afd400a5f47aa67510a
SSDEEP
1536:pUEkUaLBLNH8D+nuI1LWzpF5uCHJ4ebNu9AGO1/6MUjPUWl9z:DExNcqDwzpfuCHJDELO1/DUg+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7120c2369da51c645543c9882477f628_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE