CancelDll
LoadDll
Behavioral task
behavioral1
Sample
72e581f69ddd724735977cda6ad4f869_JaffaCakes118.dll
Resource
win7-20240705-en
Target
72e581f69ddd724735977cda6ad4f869_JaffaCakes118
Size
97KB
MD5
72e581f69ddd724735977cda6ad4f869
SHA1
2f246bf2bd0730d964e2dde23e4784c7942728ca
SHA256
a6b5b77c7f5a020e927e694a1f28e81a269aecd75f5127ff3b0f4c921eeda198
SHA512
71116a90786ca1eb6cc6d283ad7191a76c0c559a4ec0c91618c5a914832ded551e52bf3e2aa0cdd381228c88b1cbdf69d04e2872feb3043de9e3d9e874f18264
SSDEEP
1536:xNWujxA5EY8DwKtKTm5bVyNwexwTKhHhOKovvHah+cBHZdjv3Zy0:u/2Y80yKWcNwexpEPHHg+cBHZdjvZL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72e581f69ddd724735977cda6ad4f869_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE