CancelDll
LoadDll
Behavioral task
behavioral1
Sample
74fd1eba63d6acf96d94aefe0875060e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
74fd1eba63d6acf96d94aefe0875060e_JaffaCakes118
Size
96KB
MD5
74fd1eba63d6acf96d94aefe0875060e
SHA1
5ba08a3a9d1497e1b2a6f31a4d5aa9564ff5725e
SHA256
64140931e79a2341336c04ef16a97089af899c3614509c1ab6bac2f221a105a3
SHA512
aed3fff2d7d6e12c4a6845b7dac26f634e5e1415767cf66e6ad67f9465299f6728a13a30a455f61a49c7a3fca432f2934f558bfd2cf83c5e579f88de36d71b3e
SSDEEP
1536:TD6K271gp7DXHQ49AZ6Vl5BsDVt1DUZ3s23Lzs+LXwAo2Q1U:TDGYLwwoml5B21DURs2bQUXGG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74fd1eba63d6acf96d94aefe0875060e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE