CancelDll
LoadDll
Behavioral task
behavioral1
Sample
73017ea35a8360b8037aa0d03c642be5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
73017ea35a8360b8037aa0d03c642be5_JaffaCakes118
Size
82KB
MD5
73017ea35a8360b8037aa0d03c642be5
SHA1
6b9233554b4b091a6bfe83c255c2a082a8ad6590
SHA256
08ce0329a9b7d018107aca9a661aacdd24b5f3589c9ab4288f9233544a1aa447
SHA512
5f56abe9b230db5cbd9ca6fcc1bf9f2340fb25082f816c7209fcc398f8ede4e090532d2905144c512e8c7a1c73722f816a6cd1ff761b105cf071c80aabdc9ebf
SSDEEP
1536:0SBGICmjXCTyBetAxqiHvjAqFJdRrf1iOpCY6RKDgj:/BMmjXCoqiPjdTCoDgj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73017ea35a8360b8037aa0d03c642be5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE