CancelDll
LoadDll
Behavioral task
behavioral1
Sample
73c759ca6456f9835df59ec16e27a07e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
73c759ca6456f9835df59ec16e27a07e_JaffaCakes118
Size
93KB
MD5
73c759ca6456f9835df59ec16e27a07e
SHA1
7b586766ef6a969ecf84b1c278919321d0a2cabe
SHA256
0e4712d26b85623624b8acd28f2c5e33d5890c426cfd5e53e8fe33a0e8bdfb21
SHA512
55e6d42b07994e3f71af042962197f074ea7be5c6068da0cfde20bf45465edc7b5b59a5794ec00101d882968d40327d11ecf1aaef731919b65e6b6a628860a0f
SSDEEP
1536:J3iyDPFw2bprmjXzDSVJJ2dRqNM9jHJGf2IoEKksyBb:1Tw2bpC7zemRZ9bJGuIjwyZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73c759ca6456f9835df59ec16e27a07e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE