CancelDll
LoadDll
Behavioral task
behavioral1
Sample
759f747bc1b009735402886cd428e9fc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
759f747bc1b009735402886cd428e9fc_JaffaCakes118
Size
100KB
MD5
759f747bc1b009735402886cd428e9fc
SHA1
cc93d728e509c4aeb714d6e1159152b514511f6b
SHA256
e78517652529a7d2599ed7cb31a07ba778fdfa20d9d33983fbf46167c7641df8
SHA512
929d5af45d8ef18d454cf280ef96546a4fc97f769285aad34d8a8a5079d2059910943f58d0ac5043b0fd1aa535b9118bf5532844d7494682db124512ba76fec4
SSDEEP
1536:ARlNzx55thtq8FLeqbV/kuAfWe34U1rMxG9LL9hnaV2+Mz:ARlNzx55pq8FLeU/hJ2p1689RaV2+Mz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
759f747bc1b009735402886cd428e9fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE