CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7465280d176a8e419f07f1a6a7265282_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7465280d176a8e419f07f1a6a7265282_JaffaCakes118
Size
87KB
MD5
7465280d176a8e419f07f1a6a7265282
SHA1
24f0032daa44dbc73b367d71515945fbab018aed
SHA256
a592e38d759cf6111b410c093379e9aabc8e3865c338f9c9f87a16faa722ab1a
SHA512
5b11cc8d1a4e3f30cbb6380c017600cccc24cf034d1dc41640dfa9b2f1303971b5515e462bb72d5aabe33a7d000f8d27b1f77dba494faf546f949e0b822f46a1
SSDEEP
768:LcTOpEt/tAcyg/e7KfOv8QC2Oz0mKEGBOZWrxsWCHccNvIiTefXzNyEDvPEa6hoL:/xLK2OReR3CH3wxhJeCk0PF/Bh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7465280d176a8e419f07f1a6a7265282_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE