CancelDll
LoadDll
Behavioral task
behavioral1
Sample
74c16f2ef4dce16fb667932ce408091f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
74c16f2ef4dce16fb667932ce408091f_JaffaCakes118
Size
101KB
MD5
74c16f2ef4dce16fb667932ce408091f
SHA1
6305897d59d4b5f8866b88cdf199165e9f622438
SHA256
ca14a03ae3ae41bb57c8c67787262444d57a8417590a490e9dfe73cb551842f5
SHA512
1bb07a77be80f1207ae879ba6fcdc50e8c14ee70a075d154361567091829b4e0e6f8c6b12ed707f1930f00ece543126d1b56a05af905ad48cac0fa7e1d8673e6
SSDEEP
1536:MxvNbz0ZBTYCsmjWrzXEObu0gK9VfdGU2lpB6Q7XpZaP:OB0BTYCssez0OqoV74D7uP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74c16f2ef4dce16fb667932ce408091f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE