CancelDll
LoadDll
Behavioral task
behavioral1
Sample
713932dff9d56d65c240cf61c3e1dc47_JaffaCakes118.dll
Resource
win7-20240705-en
Target
713932dff9d56d65c240cf61c3e1dc47_JaffaCakes118
Size
81KB
MD5
713932dff9d56d65c240cf61c3e1dc47
SHA1
2e746857e47659a69c08dd206c8ba9ccd99223db
SHA256
b493596f18a3951d03ea96a21ea07a0c6d4d10b39ecca5295ef971be88c4f247
SHA512
63eff980d641a83902cc0672098abfda84db8eb0e94bc9cb16ed403f0c63a046acb32cb4d7db486e97b73798161a341511b4368f197529059bab307a05e1e37d
SSDEEP
1536:6MG5swHfatiJPRuntzlAcJM8anXani4indN7+pz:XEHfOiJpQtzlAmM8qXanUQz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
713932dff9d56d65c240cf61c3e1dc47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE