CancelDll
LoadDll
Behavioral task
behavioral1
Sample
75a2c4b671d0b66f360bb40518da0dd9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
75a2c4b671d0b66f360bb40518da0dd9_JaffaCakes118
Size
94KB
MD5
75a2c4b671d0b66f360bb40518da0dd9
SHA1
a2b96b5cda92ee3b66d149e452c394d000b1f870
SHA256
f5005f99e04d13ca62697127b460fdffb98956b72bdd645f13ec548ae7f7379b
SHA512
fb1088151282ef3a745a7448013a6ebb6e4d97a387c95e877b2100a5193308c01944e33941d163fbf8307ef6eb3d5bf3da6cb0978fcaf429596edf1ba9607349
SSDEEP
1536:MxvNbz0ZBTYCssjXf/nYpFYhBt46DULCpF/f+DK6TWMu8:OB0BTYCssbni2vDQCpZ+e6TtP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75a2c4b671d0b66f360bb40518da0dd9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE