CancelDll
LoadDll
Behavioral task
behavioral1
Sample
761848a044d0146cc0574f5b528fc328_JaffaCakes118.dll
Resource
win7-20240704-en
Target
761848a044d0146cc0574f5b528fc328_JaffaCakes118
Size
129KB
MD5
761848a044d0146cc0574f5b528fc328
SHA1
65d67a7c366d5565907d88f1ec510d0f677548ec
SHA256
38c1bb2b2790c8251f350d7a21191365799d11385e08097040d8934efd8e406c
SHA512
c24b17125a93d2c5a387acb31cdb9f2e3f7089fa2989a6d213d7b0af9a69b089c2c10d8b3a89af9f236794a673eb62e3d7c94e885f97670d46fc0153a0a5802e
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJq3M/ef2dqZ72pRyreGUwtzemy4MU3lu:l9L1xm6hpbVc8/wUO72byreGQX43E
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
761848a044d0146cc0574f5b528fc328_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE