CancelDll
LoadDll
Behavioral task
behavioral1
Sample
733ec8d43bb623927c8d2172106eaeef_JaffaCakes118.dll
Resource
win7-20240708-en
Target
733ec8d43bb623927c8d2172106eaeef_JaffaCakes118
Size
99KB
MD5
733ec8d43bb623927c8d2172106eaeef
SHA1
3d7980a2c4f69caf53a641d16c945aed296aeb4b
SHA256
e232712bf0decfc324145aab810a282173ea8f95faee416b513267d1c580b768
SHA512
d7a78f54bff85ae800285e61fea7515fee22cf2432f9bcba76504e64b28f240fb3986de91dbebea9b8de00ab5d4cfc915e46efcf226b2f0f8ea0085db9151b1b
SSDEEP
3072:Xjs9B6APiy7uXuTaOmTREhezK8zJ+D52L:EBGOueSREgzB0d4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
733ec8d43bb623927c8d2172106eaeef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE