CancelDll
LoadDll
Behavioral task
behavioral1
Sample
766ebcfc885002642e30085aaecbd4af_JaffaCakes118.dll
Resource
win7-20240705-en
Target
766ebcfc885002642e30085aaecbd4af_JaffaCakes118
Size
87KB
MD5
766ebcfc885002642e30085aaecbd4af
SHA1
da90d32f8a7c3964748bdc932aeb7bab1408b7ef
SHA256
46d5e75eba50c27cd7bf78986be0343509a9e8add5f7b30db8ac8b6fd9f5c22c
SHA512
38599776c3ebd2911348658c9eb9745618f0e3d0a204971b88f6ece4dd3472767fe75d6fc4820c6c98650c7fc7cd86dc4cfe289f83ea18b7db91a743f8e53ed4
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr77WDy8tDAaUXGsg5rtR7AD:03/KeW8V3rQsaeCD3+3g5rtRED
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
766ebcfc885002642e30085aaecbd4af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE