CancelDll
LoadDll
Behavioral task
behavioral1
Sample
74db07b3538d0fbf0697188bd9c36c5b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74db07b3538d0fbf0697188bd9c36c5b_JaffaCakes118
Size
74KB
MD5
74db07b3538d0fbf0697188bd9c36c5b
SHA1
5dba375fe06418b8ed3460298551ec693164751a
SHA256
eb069d00dddd801963491d1ac492fff4603e6e08db845340b28e3a1af9e3bcbf
SHA512
c5500428a8618c5c0001a37a178e7d97f0b545b51434e7194599f9509124829d3663df1b245d7018278557ad150f738880d6598dd5c157d106b11471a6802b5a
SSDEEP
1536:aI9js9B05V54qtFP3pkqqMzR2IM7Fg4g/:Xjs9B6AUuMzR2IURg/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74db07b3538d0fbf0697188bd9c36c5b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE