CancelDll
LoadDll
Behavioral task
behavioral1
Sample
725044b99a8efa4bd2245e46e1760fcc_JaffaCakes118.dll
Resource
win7-20240704-en
Target
725044b99a8efa4bd2245e46e1760fcc_JaffaCakes118
Size
85KB
MD5
725044b99a8efa4bd2245e46e1760fcc
SHA1
414ab1b4c70bdef65e02fa14dff80b960a7faaea
SHA256
b51eec31b7f136331ad307741bcadbfc0c99da07e50c64c1ef3d47c02d0d2d07
SHA512
9a14142b4fd56f7f423dfda9f5fbd5720297f429d5f0f4d918bd0e5f574763394320f2771a432c42dd08167130e508e390d9da3e32d96c821ab8d18e3c3e677d
SSDEEP
1536:SAVJ0mWeB/iU9aj1q1H38hgsyUA2yyym6DFKTfuu/qRmHHqh:zJ0mW8/i5pushy9m6RSfuutHHqh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
725044b99a8efa4bd2245e46e1760fcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE