CancelDll
LoadDll
Behavioral task
behavioral1
Sample
74f1eaef7ce17e0af868d80bc3bb0473_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74f1eaef7ce17e0af868d80bc3bb0473_JaffaCakes118
Size
119KB
MD5
74f1eaef7ce17e0af868d80bc3bb0473
SHA1
6b2cac251da24c1f23636feb6bcc8262d1710047
SHA256
0b3cdd7ff682d9b2403f64e75f3530bcdbb56e71c2e6b1e441cd4e6c076d2495
SHA512
07c2fbfb4839541deb0ecd6d001bcdc949bb23a00802049d2abc0877853a8f130073fde3c73391c866c5b2e0182bef68391c33781c95e0e39583ab26eaa102cf
SSDEEP
768:9hc2rbssHT2tFrU1+HLkcl9vzrXFPGmKEGepSachaG9lp7bioo6/2x9OqjQcTjSB:9NEFUaLBF/H8lziK2HrJSQ1lihQ4xmg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74f1eaef7ce17e0af868d80bc3bb0473_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE